[CLSA-2022:1648567705] Fix of CVE: CVE-2021-45444
Type:
security
Severity:
moderate
Release date:
2022-03-29
Description:
- CVE-2021-45444: do not expand PROMPT_SUBST within argument of prompt-expansion sequences such as file.file to avoid arbitrary code execution
Updated packages:
  • zsh-html-5.5.1-6.el8.2.tuxcare.els1.noarch.rpm
    sha:f97683ee574537dc900beb9bd489bd5b75afdefd
  • zsh-5.5.1-6.el8.2.tuxcare.els1.x86_64.rpm
    sha:d087a3e781abfe59e85e704787fb81d6358b9143
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.