Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2020.0107
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2020-0107)
Zusammenfassung:	The remote host is missing an update for the 'zsh' package(s) announced via the MGASA-2020-0107 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'zsh' package(s) announced via the MGASA-2020-0107 advisory. Vulnerability Insight: Updated zsh packages fix security vulnerability: A privilege escalation vulnerability was discovered in zsh, whereby a user could regain a formerly elevated privilege level even when such an action should not be permitted (CVE-2019-20044). Affected Software/OS: 'zsh' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2019-20044 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FP64FFIZI2CKQOEAOI5A72PVQULE7ZZC/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PN5V7MPHRRP7QNHOEK56S7QGRU53WUN6/ http://seclists.org/fulldisclosure/2020/May/49 http://seclists.org/fulldisclosure/2020/May/53 http://seclists.org/fulldisclosure/2020/May/59 http://seclists.org/fulldisclosure/2020/May/55 https://security.gentoo.org/glsa/202003-55 http://zsh.sourceforge.net/releases.html https://github.com/XMB5/zsh-privileged-upgrade https://www.zsh.org/mla/zsh-announce/141 https://lists.debian.org/debian-lts-announce/2020/03/msg00004.html https://lists.debian.org/debian-lts-announce/2020/12/msg00000.html
Copyright	Copyright (C) 2022 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.