pool/zsh
SHA256
12
0
Fork 1
Code Issues Pull Requests Activity

Accepting request 595518 from home:kbabioch:branches:shells

Browse Source 
- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
    - zsh-CVE-2018-1071.patch
    - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)

- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner

OBS-URL: https://build.opensuse.org/request/show/595518
OBS-URL: https://build.opensuse.org/package/show/shells/zsh?expand=0&rev=186
This commit is contained in:
Ismail Dönmez
2018-04-12 07:18:31 +00:00
committed by Git OBS Bridge
parent 947257e3ff
commit 05394b236c
6 changed files with 61 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
zsh.changes
View File

@@ -1,3 +1,24 @@
-------------------------------------------------------------------
Wed Apr 11 07:45:35 UTC 2018 - kbabioch@suse.com
- Update to 5.5
* The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
and `...` command substitutions when used on the command line.
* Dropped patches, which are included upstream now:
- zsh-CVE-2018-1071.patch
- zsh-CVE-2018-1083.patch
* Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
local arbitrary code execution (CVE-2018-1100 bnc#1089030)
-------------------------------------------------------------------
Tue Mar 27 09:34:00 UTC 2018 - kbabioch@suse.com
- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner
-------------------------------------------------------------------
Tue Feb 27 12:21:43 UTC 2018 - kbabioch@suse.com