Lucene search

K
osvGoogleOSV:ALSA-2022:2120
HistoryMay 10, 2022 - 6:56 a.m.

Moderate: zsh security update

2022-05-1006:56:22
Google
osv.dev
3

7.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.5%

The zsh shell is a command interpreter usable as an interactive login shell and as a shell script command processor. Zsh resembles the ksh shell (the Korn shell), but includes many enhancements. Zsh supports command-line editing, built-in spelling correction, programmable command completion, shell functions (with autoloading), a history mechanism, and more.

Security Fix(es):

  • zsh: Prompt expansion vulnerability (CVE-2021-45444)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.