Related: CVE-2019-20044 - improve printing of error messages

Resolves: CVE-2019-20044 - drop privileges securely when unsetting PRIVILEGED option
2020-03-03 12:38:54 +01:00 · 2020-02-24 14:53:26 +01:00
2 changed files with 1404 additions and 1 deletions
--- a/0002-zsh-5.7.1-CVE-2019-20044.patch
+++ b/0002-zsh-5.7.1-CVE-2019-20044.patch
--- a/zsh.spec
+++ b/zsh.spec
@ -1,7 +1,7 @@
 Summary: Powerful interactive shell
 Name: zsh
 Version: 5.7.1
-Release: 4%{?dist}
+Release: 6%{?dist}
 License: MIT
 URL: http://zsh.sourceforge.net/
 Source0: https://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz
@ -15,6 +15,9 @@ Source6: dotzshrc
 # make failed searches of history in Zle robust (#1722703)
 Patch1:  0001-zsh-5.7.1-zle-history-avoid-crash.patch

+# drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)
+Patch2:  0002-zsh-5.7.1-CVE-2019-20044.patch
+
 BuildRequires: autoconf
 BuildRequires: coreutils
 BuildRequires: gawk
@ -157,6 +160,12 @@ fi
 %doc Doc/*.html

 %changelog
+* Tue Mar 03 2020 Kamil Dudka <kdudka@redhat.com> - 5.7.1-6
+- improve printing of error messages introduced by the fix of CVE-2019-20044
+
+* Mon Feb 24 2020 Kamil Dudka <kdudka@redhat.com> - 5.7.1-5
+- drop privileges securely when unsetting PRIVILEGED option (CVE-2019-20044)
+
 * Fri Jul 26 2019 Kamil Dudka <kdudka@redhat.com> - 5.7.1-4
 - make failed searches of history in Zle robust (#1722703)
Author	SHA1	Message	Date
Kamil Dudka	66db9a948a	Related: CVE-2019-20044 - improve printing of error messages	2020-03-03 12:38:54 +01:00
Kamil Dudka	84fbd7d671	Resolves: CVE-2019-20044 - drop privileges securely when unsetting PRIVILEGED option	2020-02-24 14:53:26 +01:00