CVE-2021-45444

Several security issues were fixed in Zsh ...

It was discovered that zsh, a powerful shell and scripting language, did not prevent recursive prompt expansion This would allow an attacker to execute arbitrary commands into a user's shell, for instance by tricking a vcs_info user into checking out a git branch with a specially crafted name For the oldstable distribution (buster), this problem ...

A vulnerability was found in zsh in the parsecolorchar() function of promptc file This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by a %F%K argument This occurs because of recursive PROMPT_SUBST expansion (CVE-2021-45444) ...

In zsh before 581, an attacker can achieve code execution if they control a command output inside the prompt, as demonstrated by a %F argument This occurs because of recursive PROMPT_SUBST expansion ...

A vulnerability was found in zsh in the parsecolorchar() function of promptc file This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by a %F%K argument This occurs because of recursive PROMPT_SUBST expansion (CVE-2021-45444) ...

A vulnerability was found in zsh in the parsecolorchar() function of promptc file This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by a %F%K argument This occurs because of recursive PROMPT_SUBST expansion (CVE-2021-45444) ...

A vulnerability was found in zsh in the parsecolorchar() function of promptc file This flaw allows an attacker to perform code execution if they control a command output inside the prompt, as stated by a %F%K argument This occurs because of recursive PROMPT_SUBST expansion (CVE-2021-45444) ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...