Zsh: Privilege escalation

Zsh: Privilege escalation A vulnerability in Zsh might allow an attacker to escalate privileges. zsh 2020-03-25 2020-03-25 711136 local, remote 5.8 5.8

A shell designed for interactive use, although it is also a powerful scripting language.

It was discovered that Zsh was insecure dropping privileges when unsetting PRIVILEGED option.

An attacker could escalate privileges.

There is no known workaround at this time.

All Zsh users should upgrade to the latest version:


      # emerge --sync
      # emerge --ask --oneshot --verbose ">=app-shells/zsh-5.8"

CVE-2019-20044 whissi whissi