Zsh Mailing List Archive Messages sorted by: Reverse Date, Date, Thread, Author

Re: CVE-2021-45444 really fixed in 5.8.1?

X-seq: zsh-users 27551
From: dana <dana@xxxxxxx>
To: "Vincent Bernat" <bernat@xxxxxxxx>
Cc: zsh-users@xxxxxxx
Subject: Re: CVE-2021-45444 really fixed in 5.8.1?
Date: Sat, 12 Mar 2022 18:01:55 -0600
Archived-at: <https://zsh.org/users/27551>
In-reply-to: <m3pmmqok0e.fsf@luffy.cx>
List-id: <zsh-users.zsh.org>
References: <m38rtfutff.fsf@luffy.cx> <8e5ef93a-85b0-4a04-9b3a-01452f29e68f@www.fastmail.com> <m3pmmqok0e.fsf@luffy.cx>

On Sat 12 Mar 2022, at 16:58, Vincent Bernat wrote:
> You mean, it was possible to do "%F{$(echo hello)}"?

Yes, that kind of thing.

dana

References:
- CVE-2021-45444 really fixed in 5.8.1?
  - From: Vincent Bernat
- Re: CVE-2021-45444 really fixed in 5.8.1?
  - From: dana
- Re: CVE-2021-45444 really fixed in 5.8.1?
  - From: Vincent Bernat

Messages sorted by: Reverse Date, Date, Thread, Author