File _patchinfo of Package patchinfo.23100
<patchinfo incident="23100">
<issue tracker="cve" id="2019-20044"/>
<issue tracker="bnc" id="1163882">VUL-0: CVE-2019-20044: zsh: insecure dropping of privileges when unsetting PRIVILEGED option</issue>
<issue tracker="cve" id="2021-45444"/>
<issue tracker="bnc" id="1196435">VUL-0: CVE-2021-45444: zsh: Prompt expansion vulnerability</issue>
<packager>pperego</packager>
<rating>important</rating>
<category>security</category>
<summary>Security update for zsh</summary>
<description>This update for zsh fixes the following issues:
- CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be
executed related to prompt expansion (bsc#1196435).
- CVE-2019-20044: Fixed a vulnerability where shell privileges would not be
properly dropped when unsetting the PRIVILEGED option (bsc#1163882).
</description>
</patchinfo>