Critical Security Alert for Scientific Linux: zsh Privilege Escalation Risk

zsh: insecure dropping of privileges when unsetting PRIVILEGED option (CVE-2019-20044) SL6 x86_64 zsh-4.3.11-11.el6_10.x86_64.rpm zsh-debuginfo-4.3.11-11.el6_10.x86_64.rpm zsh-html-4.3.11-11.el6_10.x86_64.rpm i386 zsh-4.3.11-11.el6_10.i686.rpm zsh-debuginfo-4.3.11-11.el6_10.i686.rpm zsh-html-4.3.11-11.el6_10.i686.rpm - Scientific Linux Development Team

Synopsis:          Important: zsh security update
Advisory ID:       SLSA-2020:0892-1
Issue Date:        2020-03-18
CVE Numbers:       None
--

Security Fix(es):

* zsh: insecure dropping of privileges when unsetting PRIVILEGED option
(CVE-2019-20044)
--

SL6
  x86_64
    zsh-4.3.11-11.el6_10.x86_64.rpm
    zsh-debuginfo-4.3.11-11.el6_10.x86_64.rpm
    zsh-html-4.3.11-11.el6_10.x86_64.rpm
  i386
    zsh-4.3.11-11.el6_10.i686.rpm
    zsh-debuginfo-4.3.11-11.el6_10.i686.rpm
    zsh-html-4.3.11-11.el6_10.i686.rpm

- Scientific Linux Development Team