zsh 5.0.2-3ubuntu6.1 source package in Ubuntu

Changelog

zsh (5.0.2-3ubuntu6.1) trusty-security; urgency=medium

  * SECURITY UPDATE: possibly privilege escalation
    - debian/patches/CVE-2014-10070.patch: safer import of
      numerical variables from environment in Src/params.c,
      Src/zsh.h.
    - CVE-2014-10070
  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2014-10071.patch: avoid buffer overflow
      for very long fds in Src/exec.c.
    - CVE-2014-10071
  * SECURITY UPDATE: buffer overflow
    - debian/patches/CVE-2014-10072.patch: fix buffer overflow in
      Src/utils.c.
    - CVE-2014-10072
  * SECURITY UPDATE: undersized buffer
    - debian/patches/CVE-2016-10714.patch: Add extra byte to PATH_MAX
      in Src/Zle/compctl.c, Src/builtin.c, Src/compat.c, Src/exec.c,
      Src/glob.c, Src/hist.c, Src/utils.c.
    - CVE-2016-10714
  * SECURITY UPDATE: NULL dereference
    - debian/patches/CVE-2017-18205.patch: fix in Src/builtin.c,
      Test/B01cd.ztst.
    - CVE-2017-18205
  * SECURITY UPDATE: Crash while copy an empty hash table
    - debian/patches/CVE-2018-7549.patch: avoid crash empty
      hash table in Src/params.c.
    - CVE-2018-7549

 -- <email address hidden> (Leonidas S. Barbosa)  Wed, 07 Mar 2018 08:03:11 -0300

Upload details

Uploaded by:
Leonidas S. Barbosa
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
any all
Section:
shells
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
zsh_5.0.2.orig-doc.tar.bz2 2.8 MiB 99ee08cfc91935af8714bd98db652f016d6c7a8a71ba7c6d6223910cd0b7fbf1
zsh_5.0.2.orig.tar.bz2 2.3 MiB e2926d3bb549325b892bab5e28d7f79dbf469ffdc438644262c4261ae0d79683
zsh_5.0.2-3ubuntu6.1.debian.tar.gz 79.4 KiB b42b456270bdfc7099b05fa5ee1b63ef8c20bd79de76bc9ac76f8774a99e1460
zsh_5.0.2-3ubuntu6.1.dsc 2.8 KiB d19eec25bd26b8544e9f3c995b0091f78cf50026e7b1b0213ed6892f514ee834

View changes file

Binary packages built by this source

zsh: shell with lots of features

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.

zsh-beta: transitional package to zsh

 The purpose of this package is solely the transition from the zsh-beta
 package to the zsh package. It can be safely removed if no more user
 has zsh-beta as login shell.

zsh-beta-doc: transitional package to zsh-doc

 The purpose of this package is solely the transition from the
 zsh-beta-doc package to the zsh-doc package. It can be safely
 removed.

zsh-common: architecture independent files for Zsh

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This package contains the common zsh files shared by all
 architectures.

zsh-dbg: shell with lots of features (debugging symbols)

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This package contains gdb debugging symbols for the 'zsh'
 package.

zsh-dbgsym: debug symbols for package zsh

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.

zsh-dev: shell with lots of features (development files)

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This package contains headers and scripts necessary to compile
 third-party modules.

zsh-doc: zsh documentation - info/HTML format

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This contains the documentation in GNU info and HTML formats.

zsh-static: shell with lots of features (static link)

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This is the statically-compiled version of the shell.

zsh-static-dbgsym: debug symbols for package zsh-static

 Zsh is a UNIX command interpreter (shell) usable as an
 interactive login shell and as a shell script command
 processor. Of the standard shells, zsh most closely resembles
 ksh but includes many enhancements. Zsh has command-line editing,
 built-in spelling correction, programmable command completion,
 shell functions (with autoloading), a history mechanism, and a
 host of other features.
 .
 This is the statically-compiled version of the shell.