![Fabrice Fontaine](/assets/img/avatar_default.png)
- Fix CVE-2019-20044: In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid(). - Update indentation of hash file (two spaces) Signed-off-by: Fabrice Fontaine <fontaine.fabrice@gmail.com> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
8 lines
393 B
Plaintext
8 lines
393 B
Plaintext
# From http://www.zsh.org/pub/MD5SUM
|
|
md5 e02a5428620b3dd268800c7843b3dd4d zsh-5.8.tar.xz
|
|
# Calculated based on the hash above and after checking signature
|
|
# http://www.zsh.org/pub/zsh-5.8.tar.xz.asc
|
|
sha256 dcc4b54cc5565670a65581760261c163d720991f0d06486da61f8d839b52de27 zsh-5.8.tar.xz
|
|
# Locally calculated
|
|
sha256 d06fdf3ef9b1ec69d6b9e170b0a9516fbad3523261ff1668bde3bfea6e0ef5f5 LICENCE
|