import zsh-5.5.1-6.el8
This commit is contained in:
CentOS Sources
commit
ced9abba38
1
.gitignore
vendored
Normal file
1
.gitignore
vendored
Normal file
@ -0,0 +1 @@
|
|||||||
|
SOURCES/zsh-5.5.1.tar.xz
|
||||||
1
.zsh.metadata
Normal file
1
.zsh.metadata
Normal file
@ -0,0 +1 @@
|
|||||||
|
98ea952bba9b8752635c75f54bcecef072d3036e SOURCES/zsh-5.5.1.tar.xz
|
||||||
148
SOURCES/0001-zsh-5.5.1-CVE-2018-0502-CVE-2018-13259.patch
Normal file
148
SOURCES/0001-zsh-5.5.1-CVE-2018-0502-CVE-2018-13259.patch
Normal file
@ -0,0 +1,148 @@
|
|||||||
|
From ddb6c5b4c0ab9c6a7404112d367f0c7cc400ceec Mon Sep 17 00:00:00 2001
|
||||||
|
From: Anthony Sottile <asottile@umich.edu>
|
||||||
|
Date: Mon, 3 Sep 2018 14:39:25 +0000
|
||||||
|
Subject: [PATCH] CVE-2018-0502, CVE-2018-13259: Fix two security issues in
|
||||||
|
shebang line parsing.
|
||||||
|
|
||||||
|
See NEWS for more information.
|
||||||
|
|
||||||
|
Patch by Anthony Sottile and Buck Evan.
|
||||||
|
|
||||||
|
Upstream-commit: 1c4c7b6a4d17294df028322b70c53803a402233d
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
---
|
||||||
|
Etc/FAQ.yo | 2 +-
|
||||||
|
Src/exec.c | 36 ++++++++++++++++++++----------------
|
||||||
|
Test/A05execution.ztst | 22 ++++++++++++++++++++++
|
||||||
|
3 files changed, 43 insertions(+), 17 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/Etc/FAQ.yo b/Etc/FAQ.yo
|
||||||
|
index 72ff7fa..8552fe7 100644
|
||||||
|
--- a/Etc/FAQ.yo
|
||||||
|
+++ b/Etc/FAQ.yo
|
||||||
|
@@ -306,7 +306,7 @@ sect(On what machines will it run?)
|
||||||
|
|
||||||
|
sect(What's the latest version?)
|
||||||
|
|
||||||
|
- Zsh 5.5.1 is the latest production version. For details of all the
|
||||||
|
+ Zsh 5.6 is the latest production version. For details of all the
|
||||||
|
changes, see the NEWS file in the source distribution.
|
||||||
|
|
||||||
|
A beta of the next version is sometimes available. Development of zsh is
|
||||||
|
diff --git a/Src/exec.c b/Src/exec.c
|
||||||
|
index 216057a..0908a1a 100644
|
||||||
|
--- a/Src/exec.c
|
||||||
|
+++ b/Src/exec.c
|
||||||
|
@@ -453,7 +453,7 @@ execcursh(Estate state, int do_exec)
|
||||||
|
|
||||||
|
/* execve after handling $_ and #! */
|
||||||
|
|
||||||
|
-#define POUNDBANGLIMIT 64
|
||||||
|
+#define POUNDBANGLIMIT 128
|
||||||
|
|
||||||
|
/**/
|
||||||
|
static int
|
||||||
|
@@ -494,18 +494,20 @@ zexecve(char *pth, char **argv, char **newenvp)
|
||||||
|
if ((fd = open(pth, O_RDONLY|O_NOCTTY)) >= 0) {
|
||||||
|
argv0 = *argv;
|
||||||
|
*argv = pth;
|
||||||
|
- execvebuf[0] = '\0';
|
||||||
|
+ memset(execvebuf, '\0', POUNDBANGLIMIT + 1);
|
||||||
|
ct = read(fd, execvebuf, POUNDBANGLIMIT);
|
||||||
|
close(fd);
|
||||||
|
if (ct >= 0) {
|
||||||
|
- if (execvebuf[0] == '#') {
|
||||||
|
- if (execvebuf[1] == '!') {
|
||||||
|
- for (t0 = 0; t0 != ct; t0++)
|
||||||
|
- if (execvebuf[t0] == '\n')
|
||||||
|
- break;
|
||||||
|
+ if (ct >= 2 && execvebuf[0] == '#' && execvebuf[1] == '!') {
|
||||||
|
+ for (t0 = 0; t0 != ct; t0++)
|
||||||
|
+ if (execvebuf[t0] == '\n')
|
||||||
|
+ break;
|
||||||
|
+ if (t0 == ct)
|
||||||
|
+ zerr("%s: bad interpreter: %s: %e", pth,
|
||||||
|
+ execvebuf + 2, eno);
|
||||||
|
+ else {
|
||||||
|
while (inblank(execvebuf[t0]))
|
||||||
|
execvebuf[t0--] = '\0';
|
||||||
|
- execvebuf[POUNDBANGLIMIT] = '\0';
|
||||||
|
for (ptr = execvebuf + 2; *ptr && *ptr == ' '; ptr++);
|
||||||
|
for (ptr2 = ptr; *ptr && *ptr != ' '; ptr++);
|
||||||
|
if (eno == ENOENT) {
|
||||||
|
@@ -514,10 +516,16 @@ zexecve(char *pth, char **argv, char **newenvp)
|
||||||
|
*ptr = '\0';
|
||||||
|
if (*ptr2 != '/' &&
|
||||||
|
(pprog = pathprog(ptr2, NULL))) {
|
||||||
|
- argv[-2] = ptr2;
|
||||||
|
- argv[-1] = ptr + 1;
|
||||||
|
- winch_unblock();
|
||||||
|
- execve(pprog, argv - 2, newenvp);
|
||||||
|
+ if (ptr == execvebuf + t0 + 1) {
|
||||||
|
+ argv[-1] = ptr2;
|
||||||
|
+ winch_unblock();
|
||||||
|
+ execve(pprog, argv - 1, newenvp);
|
||||||
|
+ } else {
|
||||||
|
+ argv[-2] = ptr2;
|
||||||
|
+ argv[-1] = ptr + 1;
|
||||||
|
+ winch_unblock();
|
||||||
|
+ execve(pprog, argv - 2, newenvp);
|
||||||
|
+ }
|
||||||
|
}
|
||||||
|
zerr("%s: bad interpreter: %s: %e", pth, ptr2,
|
||||||
|
eno);
|
||||||
|
@@ -532,10 +540,6 @@ zexecve(char *pth, char **argv, char **newenvp)
|
||||||
|
winch_unblock();
|
||||||
|
execve(ptr2, argv - 1, newenvp);
|
||||||
|
}
|
||||||
|
- } else if (eno == ENOEXEC) {
|
||||||
|
- argv[-1] = "sh";
|
||||||
|
- winch_unblock();
|
||||||
|
- execve("/bin/sh", argv - 1, newenvp);
|
||||||
|
}
|
||||||
|
} else if (eno == ENOEXEC) {
|
||||||
|
for (t0 = 0; t0 != ct; t0++)
|
||||||
|
diff --git a/Test/A05execution.ztst b/Test/A05execution.ztst
|
||||||
|
index 0804691..fb39d05 100644
|
||||||
|
--- a/Test/A05execution.ztst
|
||||||
|
+++ b/Test/A05execution.ztst
|
||||||
|
@@ -12,7 +12,14 @@
|
||||||
|
|
||||||
|
print '#!/bin/sh\necho This is dir2' >dir2/tstcmd
|
||||||
|
|
||||||
|
+ print -n '#!sh\necho This is slashless' >tstcmd-slashless
|
||||||
|
+ print -n '#!echo foo\necho This is arg' >tstcmd-arg
|
||||||
|
+ print '#!xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxnyyy' >tstcmd-interp-too-long
|
||||||
|
+ print '#!/bin/sh\necho should not execute; exit 1' >xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxn
|
||||||
|
+
|
||||||
|
chmod 755 tstcmd dir1/tstcmd dir2/tstcmd
|
||||||
|
+ chmod 755 tstcmd-slashless tstcmd-arg tstcmd-interp-too-long
|
||||||
|
+ chmod 755 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxn
|
||||||
|
|
||||||
|
%test
|
||||||
|
./tstcmd
|
||||||
|
@@ -33,6 +40,21 @@
|
||||||
|
0:path (2)
|
||||||
|
>This is top
|
||||||
|
|
||||||
|
+ PATH=/bin:${ZTST_testdir}/command.tmp/ tstcmd-slashless
|
||||||
|
+0:path (3)
|
||||||
|
+>This is slashless
|
||||||
|
+
|
||||||
|
+ PATH=/bin:${ZTST_testdir}/command.tmp tstcmd-arg
|
||||||
|
+0:path (4)
|
||||||
|
+*>foo */command.tmp/tstcmd-arg
|
||||||
|
+
|
||||||
|
+ path=(/bin ${ZTST_testdir}/command.tmp/)
|
||||||
|
+ tstcmd-interp-too-long 2>&1; echo "status $?"
|
||||||
|
+ path=($storepath)
|
||||||
|
+0:path (5)
|
||||||
|
+*>*tstcmd-interp-too-long: bad interpreter: x*xn: no such file or directory
|
||||||
|
+>status 127
|
||||||
|
+
|
||||||
|
functst() { print $# arguments:; print -l $*; }
|
||||||
|
functst "Eines Morgens" "als Gregor Samsa"
|
||||||
|
functst ""
|
||||||
|
--
|
||||||
|
2.17.1
|
||||||
|
|
||||||
266
SOURCES/0002-zsh-5.5.1-static-analysis.patch
Normal file
266
SOURCES/0002-zsh-5.5.1-static-analysis.patch
Normal file
@ -0,0 +1,266 @@
|
|||||||
|
From bc943b78268ad633f79756639d4295f7b61dbedd Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
Date: Wed, 7 Nov 2018 14:04:52 +0100
|
||||||
|
Subject: [PATCH 1/5] 43791: File descriptor could be closed twice in clone
|
||||||
|
|
||||||
|
Upstream-commit: a8cc017c74a916b690dc074c299faf4bd24b5af4
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
|
||||||
|
Error: USE_AFTER_FREE (CWE-825):
|
||||||
|
zsh-5.5.1/Src/Modules/clone.c:71: closed_arg: "close(int)" closes "ttyfd".
|
||||||
|
zsh-5.5.1/Src/Modules/clone.c:99: double_close: Calling "close(int)" closes handle "ttyfd" which has already been closed.
|
||||||
|
97| setsparam("TTY", ztrdup(ttystrname));
|
||||||
|
98| }
|
||||||
|
99|-> close(ttyfd);
|
||||||
|
100| if (pid < 0) {
|
||||||
|
101| zerrnam(nam, "fork failed: %e", errno);
|
||||||
|
---
|
||||||
|
Src/Modules/clone.c | 3 ++-
|
||||||
|
1 file changed, 2 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/Src/Modules/clone.c b/Src/Modules/clone.c
|
||||||
|
index 9304292..dfd8e8a 100644
|
||||||
|
--- a/Src/Modules/clone.c
|
||||||
|
+++ b/Src/Modules/clone.c
|
||||||
|
@@ -96,7 +96,8 @@ bin_clone(char *nam, char **args, UNUSED(Options ops), UNUSED(int func))
|
||||||
|
init_io(NULL);
|
||||||
|
setsparam("TTY", ztrdup(ttystrname));
|
||||||
|
}
|
||||||
|
- close(ttyfd);
|
||||||
|
+ else
|
||||||
|
+ close(ttyfd);
|
||||||
|
if (pid < 0) {
|
||||||
|
zerrnam(nam, "fork failed: %e", errno);
|
||||||
|
return 1;
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
|
|
||||||
|
From 6096988f02635ed336a056e3670b63070400e6bc Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
Date: Wed, 7 Nov 2018 14:04:53 +0100
|
||||||
|
Subject: [PATCH 2/5] 43793: computil could overrun buffer
|
||||||
|
|
||||||
|
Upstream-commit: 031afe420725e328e9d7742be69ef0bd81c62b9a
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
|
||||||
|
Error: BUFFER_SIZE (CWE-120):
|
||||||
|
zsh-5.5.1/Src/Zle/computil.c:564: overlapping_buffer: The source buffer "str->str + 2" potentially overlaps with the destination buffer "str->str", which results in undefined behavior for "strcpy".
|
||||||
|
zsh-5.5.1/Src/Zle/computil.c:564: remediation: Replace "strcpy(dest, src)" with "memmove(dest, src, strlen(src)+1)".
|
||||||
|
562| str->str = ztrdup(str->str);
|
||||||
|
563| if (hide[1] && str->str[0] == '-' && str->str[1] == '-')
|
||||||
|
564|-> strcpy(str->str, str->str + 2);
|
||||||
|
565| else if (str->str[0] == '-' || str->str[0] == '+')
|
||||||
|
566| strcpy(str->str, str->str + 1);
|
||||||
|
|
||||||
|
Error: BUFFER_SIZE (CWE-120):
|
||||||
|
zsh-5.5.1/Src/Zle/computil.c:566: overlapping_buffer: The source buffer "str->str + 1" potentially overlaps with the destination buffer "str->str", which results in undefined behavior for "strcpy".
|
||||||
|
zsh-5.5.1/Src/Zle/computil.c:566: remediation: Replace "strcpy(dest, src)" with "memmove(dest, src, strlen(src)+1)".
|
||||||
|
564| strcpy(str->str, str->str + 2);
|
||||||
|
565| else if (str->str[0] == '-' || str->str[0] == '+')
|
||||||
|
566|-> strcpy(str->str, str->str + 1);
|
||||||
|
567| }
|
||||||
|
568| }
|
||||||
|
---
|
||||||
|
Src/Zle/computil.c | 4 ++--
|
||||||
|
1 file changed, 2 insertions(+), 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/Src/Zle/computil.c b/Src/Zle/computil.c
|
||||||
|
index 5526e0a..cb1c010 100644
|
||||||
|
--- a/Src/Zle/computil.c
|
||||||
|
+++ b/Src/Zle/computil.c
|
||||||
|
@@ -561,9 +561,9 @@ cd_init(char *nam, char *hide, char *mlen, char *sep,
|
||||||
|
if (str->str == str->match)
|
||||||
|
str->str = ztrdup(str->str);
|
||||||
|
if (hide[1] && str->str[0] == '-' && str->str[1] == '-')
|
||||||
|
- strcpy(str->str, str->str + 2);
|
||||||
|
+ memmove(str->str, str->str + 2, strlen(str->str) - 1);
|
||||||
|
else if (str->str[0] == '-' || str->str[0] == '+')
|
||||||
|
- strcpy(str->str, str->str + 1);
|
||||||
|
+ memmove(str->str, str->str + 1, strlen(str->str));
|
||||||
|
}
|
||||||
|
}
|
||||||
|
for (ap = args; *args &&
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
|
|
||||||
|
From 29445bdf10714bd41d2124d3c31cc16c1f682854 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
Date: Wed, 7 Nov 2018 14:04:54 +0100
|
||||||
|
Subject: [PATCH 3/5] 43723: file descriptor could leak on fork error
|
||||||
|
|
||||||
|
Upstream-commit: d1095bdf744c190c7e8ff126ba02caea8f63880d
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
|
||||||
|
Error: RESOURCE_LEAK (CWE-772):
|
||||||
|
zsh-5.5.1/Src/exec.c:4680: open_fn: Returning handle opened by "open".
|
||||||
|
zsh-5.5.1/Src/exec.c:4680: var_assign: Assigning: "fd" = handle returned from "open(nam, 449, 384)".
|
||||||
|
zsh-5.5.1/Src/exec.c:4810: leaked_handle: Handle variable "fd" going out of scope leaks the handle.
|
||||||
|
4808| /* fork or open error */
|
||||||
|
4809| child_unblock();
|
||||||
|
4810|-> return nam;
|
||||||
|
4811| } else if (pid) {
|
||||||
|
4812| int os;
|
||||||
|
---
|
||||||
|
Src/exec.c | 3 ++-
|
||||||
|
1 file changed, 2 insertions(+), 1 deletion(-)
|
||||||
|
|
||||||
|
diff --git a/Src/exec.c b/Src/exec.c
|
||||||
|
index 0908a1a..8045db2 100644
|
||||||
|
--- a/Src/exec.c
|
||||||
|
+++ b/Src/exec.c
|
||||||
|
@@ -4722,7 +4722,8 @@ getoutputfile(char *cmd, char **eptr)
|
||||||
|
}
|
||||||
|
|
||||||
|
if ((cmdoutpid = pid = zfork(NULL)) == -1) {
|
||||||
|
- /* fork or open error */
|
||||||
|
+ /* fork error */
|
||||||
|
+ close(fd);
|
||||||
|
child_unblock();
|
||||||
|
return nam;
|
||||||
|
} else if (pid) {
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
|
|
||||||
|
From afb4192a75066f86ce7051a72c0feb7b80c0cdd8 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
Date: Wed, 7 Nov 2018 14:04:55 +0100
|
||||||
|
Subject: [PATCH 4/5] 43789: possible use after free clearing up math func from
|
||||||
|
module
|
||||||
|
|
||||||
|
Upstream-commit: e27175c7c8cdfeb4e28d4ff21eb51aa003d70a03
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
|
||||||
|
Error: USE_AFTER_FREE (CWE-825):
|
||||||
|
zsh-5.5.1/Src/module.c:1390: freed_arg: "deletemathfunc" frees "f".
|
||||||
|
zsh-5.5.1/Src/module.c:1352:6: freed_arg: "zfree" frees parameter "f".
|
||||||
|
zsh-5.5.1/Src/mem.c:1888:5: freed_arg: "free" frees parameter "p".
|
||||||
|
zsh-5.5.1/Src/module.c:1394: deref_after_free: Dereferencing freed pointer "f".
|
||||||
|
1392| ret = 1;
|
||||||
|
1393| } else {
|
||||||
|
1394|-> f->flags &= ~MFF_ADDED;
|
||||||
|
1395| }
|
||||||
|
1396| }
|
||||||
|
---
|
||||||
|
Src/module.c | 2 --
|
||||||
|
1 file changed, 2 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/Src/module.c b/Src/module.c
|
||||||
|
index 4ae7831..33d75eb 100644
|
||||||
|
--- a/Src/module.c
|
||||||
|
+++ b/Src/module.c
|
||||||
|
@@ -1390,8 +1390,6 @@ setmathfuncs(char const *nam, MathFunc f, int size, int *e)
|
||||||
|
if (deletemathfunc(f)) {
|
||||||
|
zwarnnam(nam, "math function `%s' already deleted", f->name);
|
||||||
|
ret = 1;
|
||||||
|
- } else {
|
||||||
|
- f->flags &= ~MFF_ADDED;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
f++;
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
|
|
||||||
|
From 4553645c00d9a2e81a79e2014b106f6590500287 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
Date: Wed, 7 Nov 2018 14:04:56 +0100
|
||||||
|
Subject: [PATCH 5/5] 43790: failed mailstat could leak memory
|
||||||
|
|
||||||
|
Upstream-commit: d50e204b0c4c10164a711bf640500e46987de9c3
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
|
||||||
|
Error: RESOURCE_LEAK (CWE-772):
|
||||||
|
zsh-5.5.1/Src/utils.c:7406: alloc_fn: Storage is returned from allocation function "appstr".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: alloc_fn: Storage is returned from allocation function "realloc".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: identity_transfer: Passing "realloc(base, strlen(base) + strlen(append) + 1UL)" as argument 1 to function "strcat", which returns that argument.
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: return_alloc_fn: Directly returning storage allocated by "strcat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7406: var_assign: Assigning: "dir" = storage returned from "appstr(ztrdup(path), "/cur")".
|
||||||
|
zsh-5.5.1/Src/utils.c:7407: noescape: Resource "dir" is not freed or pointed-to in "stat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7407: leaked_storage: Variable "dir" going out of scope leaks the storage it points to.
|
||||||
|
7405| /* See if cur/ is present */
|
||||||
|
7406| dir = appstr(ztrdup(path), "/cur");
|
||||||
|
7407|-> if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
7408| st_ret.st_atime = st_tmp.st_atime;
|
||||||
|
7409|
|
||||||
|
|
||||||
|
Error: RESOURCE_LEAK (CWE-772):
|
||||||
|
zsh-5.5.1/Src/utils.c:7412: alloc_fn: Storage is returned from allocation function "appstr".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: alloc_fn: Storage is returned from allocation function "realloc".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: identity_transfer: Passing "realloc(base, strlen(base) + strlen(append) + 1UL)" as argument 1 to function "strcat", which returns that argument.
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: return_alloc_fn: Directly returning storage allocated by "strcat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7412: var_assign: Assigning: "dir" = storage returned from "appstr(dir, "/tmp")".
|
||||||
|
zsh-5.5.1/Src/utils.c:7413: noescape: Resource "dir" is not freed or pointed-to in "stat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7413: leaked_storage: Variable "dir" going out of scope leaks the storage it points to.
|
||||||
|
7411| dir[plen] = 0;
|
||||||
|
7412| dir = appstr(dir, "/tmp");
|
||||||
|
7413|-> if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
7414| st_ret.st_mtime = st_tmp.st_mtime;
|
||||||
|
7415|
|
||||||
|
|
||||||
|
Error: RESOURCE_LEAK (CWE-772):
|
||||||
|
zsh-5.5.1/Src/utils.c:7418: alloc_fn: Storage is returned from allocation function "appstr".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: alloc_fn: Storage is returned from allocation function "realloc".
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: identity_transfer: Passing "realloc(base, strlen(base) + strlen(append) + 1UL)" as argument 1 to function "strcat", which returns that argument.
|
||||||
|
zsh-5.5.1/Src/string.c:200:5: return_alloc_fn: Directly returning storage allocated by "strcat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7418: var_assign: Assigning: "dir" = storage returned from "appstr(dir, "/new")".
|
||||||
|
zsh-5.5.1/Src/utils.c:7419: noescape: Resource "dir" is not freed or pointed-to in "stat".
|
||||||
|
zsh-5.5.1/Src/utils.c:7419: leaked_storage: Variable "dir" going out of scope leaks the storage it points to.
|
||||||
|
7417| dir[plen] = 0;
|
||||||
|
7418| dir = appstr(dir, "/new");
|
||||||
|
7419|-> if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
7420| st_ret.st_mtime = st_tmp.st_mtime;
|
||||||
|
7421|
|
||||||
|
---
|
||||||
|
Src/utils.c | 16 +++++++++++++---
|
||||||
|
1 file changed, 13 insertions(+), 3 deletions(-)
|
||||||
|
|
||||||
|
diff --git a/Src/utils.c b/Src/utils.c
|
||||||
|
index b418517..492babc 100644
|
||||||
|
--- a/Src/utils.c
|
||||||
|
+++ b/Src/utils.c
|
||||||
|
@@ -7404,19 +7404,28 @@ mailstat(char *path, struct stat *st)
|
||||||
|
|
||||||
|
/* See if cur/ is present */
|
||||||
|
dir = appstr(ztrdup(path), "/cur");
|
||||||
|
- if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
+ if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) {
|
||||||
|
+ zsfree(dir);
|
||||||
|
+ return 0;
|
||||||
|
+ }
|
||||||
|
st_ret.st_atime = st_tmp.st_atime;
|
||||||
|
|
||||||
|
/* See if tmp/ is present */
|
||||||
|
dir[plen] = 0;
|
||||||
|
dir = appstr(dir, "/tmp");
|
||||||
|
- if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
+ if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) {
|
||||||
|
+ zsfree(dir);
|
||||||
|
+ return 0;
|
||||||
|
+ }
|
||||||
|
st_ret.st_mtime = st_tmp.st_mtime;
|
||||||
|
|
||||||
|
/* And new/ */
|
||||||
|
dir[plen] = 0;
|
||||||
|
dir = appstr(dir, "/new");
|
||||||
|
- if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) return 0;
|
||||||
|
+ if (stat(dir, &st_tmp) || !S_ISDIR(st_tmp.st_mode)) {
|
||||||
|
+ zsfree(dir);
|
||||||
|
+ return 0;
|
||||||
|
+ }
|
||||||
|
st_ret.st_mtime = st_tmp.st_mtime;
|
||||||
|
|
||||||
|
#if THERE_IS_EXACTLY_ONE_MAILDIR_IN_MAILPATH
|
||||||
|
@@ -7428,6 +7437,7 @@ mailstat(char *path, struct stat *st)
|
||||||
|
st_tmp.st_atime == st_new_last.st_atime &&
|
||||||
|
st_tmp.st_mtime == st_new_last.st_mtime) {
|
||||||
|
*st = st_ret_last;
|
||||||
|
+ zsfree(dir);
|
||||||
|
return 0;
|
||||||
|
}
|
||||||
|
st_new_last = st_tmp;
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
28
SOURCES/0003-zsh-5.5.1-parse-error-exit-status.patch
Normal file
28
SOURCES/0003-zsh-5.5.1-parse-error-exit-status.patch
Normal file
@ -0,0 +1,28 @@
|
|||||||
|
From 878ebe3c74cee4b9702c9672b87ee56f057e1f02 Mon Sep 17 00:00:00 2001
|
||||||
|
From: Peter Stephenson <p.stephenson@samsung.com>
|
||||||
|
Date: Thu, 29 Nov 2018 17:54:02 +0000
|
||||||
|
Subject: [PATCH] 43854: Set tok to LEXERR on generic parse error.
|
||||||
|
|
||||||
|
Needed by main loop which detects an error this way.
|
||||||
|
|
||||||
|
Upstream-commit: ef20425381e83ebd5a10c2ab270a347018371162
|
||||||
|
Signed-off-by: Kamil Dudka <kdudka@redhat.com>
|
||||||
|
---
|
||||||
|
Src/lex.c | 1 +
|
||||||
|
1 file changed, 1 insertion(+)
|
||||||
|
|
||||||
|
diff --git a/Src/lex.c b/Src/lex.c
|
||||||
|
index 44ad880..c29aaba 100644
|
||||||
|
--- a/Src/lex.c
|
||||||
|
+++ b/Src/lex.c
|
||||||
|
@@ -1613,6 +1613,7 @@ parsestr(char **s)
|
||||||
|
zerr("parse error near `%c'", err);
|
||||||
|
else
|
||||||
|
zerr("parse error");
|
||||||
|
+ tok = LEXERR;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
return err;
|
||||||
|
--
|
||||||
|
2.17.2
|
||||||
|
|
||||||
34
SOURCES/dotzshrc
Normal file
34
SOURCES/dotzshrc
Normal file
@ -0,0 +1,34 @@
|
|||||||
|
#
|
||||||
|
# .zshrc is sourced in interactive shells.
|
||||||
|
# It should contain commands to set up aliases,
|
||||||
|
# functions, options, key bindings, etc.
|
||||||
|
#
|
||||||
|
|
||||||
|
autoload -U compinit
|
||||||
|
compinit
|
||||||
|
|
||||||
|
#allow tab completion in the middle of a word
|
||||||
|
setopt COMPLETE_IN_WORD
|
||||||
|
|
||||||
|
## keep background processes at full speed
|
||||||
|
#setopt NOBGNICE
|
||||||
|
## restart running processes on exit
|
||||||
|
#setopt HUP
|
||||||
|
|
||||||
|
## history
|
||||||
|
#setopt APPEND_HISTORY
|
||||||
|
## for sharing history between zsh processes
|
||||||
|
#setopt INC_APPEND_HISTORY
|
||||||
|
#setopt SHARE_HISTORY
|
||||||
|
|
||||||
|
## never ever beep ever
|
||||||
|
#setopt NO_BEEP
|
||||||
|
|
||||||
|
## automatically decide when to page a list of completions
|
||||||
|
#LISTMAX=0
|
||||||
|
|
||||||
|
## disable mail checking
|
||||||
|
#MAILCHECK=0
|
||||||
|
|
||||||
|
# autoload -U colors
|
||||||
|
#colors
|
||||||
8
SOURCES/zlogin.rhs
Normal file
8
SOURCES/zlogin.rhs
Normal file
@ -0,0 +1,8 @@
|
|||||||
|
#
|
||||||
|
# /etc/zlogin and .zlogin are sourced in login shells. It should
|
||||||
|
# contain commands that should be executed only in
|
||||||
|
# login shells. It should be used to set the terminal
|
||||||
|
# type and run a series of external commands (fortune,
|
||||||
|
# msgs, from, etc).
|
||||||
|
#
|
||||||
|
|
||||||
7
SOURCES/zlogout.rhs
Normal file
7
SOURCES/zlogout.rhs
Normal file
@ -0,0 +1,7 @@
|
|||||||
|
#
|
||||||
|
#
|
||||||
|
# /etc/zlogout and ~/.zlogout are run when an interactive session ends
|
||||||
|
#
|
||||||
|
#
|
||||||
|
|
||||||
|
clear
|
||||||
22
SOURCES/zprofile.rhs
Normal file
22
SOURCES/zprofile.rhs
Normal file
@ -0,0 +1,22 @@
|
|||||||
|
#
|
||||||
|
# /etc/zprofile and ~/.zprofile are run for login shells
|
||||||
|
#
|
||||||
|
|
||||||
|
PATH="$PATH:$HOME/bin"
|
||||||
|
export PATH
|
||||||
|
|
||||||
|
_src_etc_profile()
|
||||||
|
{
|
||||||
|
# Make /etc/profile happier, and have possible ~/.zshenv options like
|
||||||
|
# NOMATCH ignored.
|
||||||
|
#
|
||||||
|
emulate -L ksh
|
||||||
|
|
||||||
|
# source profile
|
||||||
|
if [ -f /etc/profile ]; then
|
||||||
|
source /etc/profile
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
_src_etc_profile
|
||||||
|
|
||||||
|
unset -f _src_etc_profile
|
||||||
14
SOURCES/zshenv.rhs
Normal file
14
SOURCES/zshenv.rhs
Normal file
@ -0,0 +1,14 @@
|
|||||||
|
# /etc/zsh/zshenv: system-wide .zshenv file for zsh(1).
|
||||||
|
#
|
||||||
|
# This file is sourced on all invocations of the shell.
|
||||||
|
# If the -f flag is present or if the NO_RCS option is
|
||||||
|
# set within this file, all other initialization files
|
||||||
|
# are skipped.
|
||||||
|
#
|
||||||
|
# This file should contain commands to set the command
|
||||||
|
# search path, plus other important environment variables.
|
||||||
|
# This file should not contain commands that produce
|
||||||
|
# output or assume the shell is attached to a tty.
|
||||||
|
#
|
||||||
|
# Global Order: zshenv, zprofile, zshrc, zlogin
|
||||||
|
|
||||||
50
SOURCES/zshrc.rhs
Normal file
50
SOURCES/zshrc.rhs
Normal file
@ -0,0 +1,50 @@
|
|||||||
|
#
|
||||||
|
# /etc/zshrc is sourced in interactive shells. It
|
||||||
|
# should contain commands to set up aliases, functions,
|
||||||
|
# options, key bindings, etc.
|
||||||
|
#
|
||||||
|
|
||||||
|
## shell functions
|
||||||
|
#setenv() { export $1=$2 } # csh compatibility
|
||||||
|
|
||||||
|
# Set prompts
|
||||||
|
PROMPT='[%n@%m]%~%# ' # default prompt
|
||||||
|
#RPROMPT=' %~' # prompt for right side of screen
|
||||||
|
|
||||||
|
# bindkey -v # vi key bindings
|
||||||
|
# bindkey -e # emacs key bindings
|
||||||
|
bindkey ' ' magic-space # also do history expansion on space
|
||||||
|
|
||||||
|
# Provide pathmunge for /etc/profile.d scripts
|
||||||
|
pathmunge()
|
||||||
|
{
|
||||||
|
if ! echo $PATH | /bin/grep -qE "(^|:)$1($|:)" ; then
|
||||||
|
if [ "$2" = "after" ] ; then
|
||||||
|
PATH=$PATH:$1
|
||||||
|
else
|
||||||
|
PATH=$1:$PATH
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
|
||||||
|
_src_etc_profile_d()
|
||||||
|
{
|
||||||
|
# Make the *.sh things happier, and have possible ~/.zshenv options like
|
||||||
|
# NOMATCH ignored.
|
||||||
|
emulate -L ksh
|
||||||
|
|
||||||
|
|
||||||
|
# from bashrc, with zsh fixes
|
||||||
|
if [[ ! -o login ]]; then # We're not a login shell
|
||||||
|
for i in /etc/profile.d/*.sh; do
|
||||||
|
if [ -r "$i" ]; then
|
||||||
|
. $i
|
||||||
|
fi
|
||||||
|
done
|
||||||
|
unset i
|
||||||
|
fi
|
||||||
|
}
|
||||||
|
_src_etc_profile_d
|
||||||
|
|
||||||
|
unset -f pathmunge _src_etc_profile_d
|
||||||
|
|
||||||
460
SPECS/zsh.spec
Normal file
460
SPECS/zsh.spec
Normal file
@ -0,0 +1,460 @@
|
|||||||
|
Summary: Powerful interactive shell
|
||||||
|
Name: zsh
|
||||||
|
Version: 5.5.1
|
||||||
|
Release: 6%{?dist}
|
||||||
|
License: MIT
|
||||||
|
URL: http://zsh.sourceforge.net/
|
||||||
|
Source0: https://downloads.sourceforge.net/%{name}/%{name}-%{version}.tar.xz
|
||||||
|
Source1: zlogin.rhs
|
||||||
|
Source2: zlogout.rhs
|
||||||
|
Source3: zprofile.rhs
|
||||||
|
Source4: zshrc.rhs
|
||||||
|
Source5: zshenv.rhs
|
||||||
|
Source6: dotzshrc
|
||||||
|
|
||||||
|
# fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259)
|
||||||
|
Patch1: 0001-zsh-5.5.1-CVE-2018-0502-CVE-2018-13259.patch
|
||||||
|
|
||||||
|
# fix programming mistakes detected by static analysis (#1602743)
|
||||||
|
Patch2: 0002-zsh-5.5.1-static-analysis.patch
|
||||||
|
|
||||||
|
# return non-zero exit status on nested parse error (#1654989)
|
||||||
|
Patch3: 0003-zsh-5.5.1-parse-error-exit-status.patch
|
||||||
|
|
||||||
|
BuildRequires: autoconf
|
||||||
|
BuildRequires: coreutils
|
||||||
|
BuildRequires: gawk
|
||||||
|
BuildRequires: gcc
|
||||||
|
BuildRequires: gdbm-devel
|
||||||
|
BuildRequires: libcap-devel
|
||||||
|
BuildRequires: ncurses-devel
|
||||||
|
BuildRequires: pcre-devel
|
||||||
|
BuildRequires: sed
|
||||||
|
BuildRequires: texi2html
|
||||||
|
BuildRequires: texinfo
|
||||||
|
Requires(post): info grep
|
||||||
|
Requires(preun): info
|
||||||
|
Requires(postun): coreutils grep
|
||||||
|
|
||||||
|
# the hostname package is not available on RHEL-6
|
||||||
|
%if 12 < 0%{?fedora} || 6 < 0%{?rhel}
|
||||||
|
BuildRequires: hostname
|
||||||
|
%else
|
||||||
|
# /bin and /usr/bin are separate directories on RHEL-6
|
||||||
|
%define _bindir /bin
|
||||||
|
%endif
|
||||||
|
|
||||||
|
Provides: /bin/zsh
|
||||||
|
|
||||||
|
%description
|
||||||
|
The zsh shell is a command interpreter usable as an interactive login
|
||||||
|
shell and as a shell script command processor. Zsh resembles the ksh
|
||||||
|
shell (the Korn shell), but includes many enhancements. Zsh supports
|
||||||
|
command line editing, built-in spelling correction, programmable
|
||||||
|
command completion, shell functions (with autoloading), a history
|
||||||
|
mechanism, and more.
|
||||||
|
|
||||||
|
%package html
|
||||||
|
Summary: Zsh shell manual in html format
|
||||||
|
BuildArch: noarch
|
||||||
|
|
||||||
|
%description html
|
||||||
|
The zsh shell is a command interpreter usable as an interactive login
|
||||||
|
shell and as a shell script command processor. Zsh resembles the ksh
|
||||||
|
shell (the Korn shell), but includes many enhancements. Zsh supports
|
||||||
|
command line editing, built-in spelling correction, programmable
|
||||||
|
command completion, shell functions (with autoloading), a history
|
||||||
|
mechanism, and more.
|
||||||
|
|
||||||
|
This package contains the Zsh manual in html format.
|
||||||
|
|
||||||
|
%prep
|
||||||
|
%autosetup -p1
|
||||||
|
autoreconf -fiv
|
||||||
|
|
||||||
|
# enable parallel build
|
||||||
|
sed -e 's|^\.NOTPARALLEL|#.NOTPARALLEL|' -i 'Config/defs.mk.in'
|
||||||
|
|
||||||
|
%build
|
||||||
|
# make build of run-time loadable modules work again (#1535422)
|
||||||
|
%undefine _strict_symbol_defs_build
|
||||||
|
|
||||||
|
# make loading of module's dependencies work again (#1277996)
|
||||||
|
export LIBLDFLAGS='-z lazy'
|
||||||
|
|
||||||
|
%configure \
|
||||||
|
--enable-etcdir=%{_sysconfdir} \
|
||||||
|
--with-tcsetpgrp \
|
||||||
|
--enable-maildir-support \
|
||||||
|
--enable-pcre
|
||||||
|
|
||||||
|
# prevent the build from failing while running in parallel
|
||||||
|
make -C Src headers
|
||||||
|
make -C Src -f Makemod zsh{path,xmod}s.h version.h
|
||||||
|
|
||||||
|
make %{?_smp_mflags} all html
|
||||||
|
|
||||||
|
%check
|
||||||
|
# Run the testsuite
|
||||||
|
make check
|
||||||
|
|
||||||
|
%install
|
||||||
|
%make_install install.info \
|
||||||
|
fndir=%{_datadir}/%{name}/%{version}/functions \
|
||||||
|
sitefndir=%{_datadir}/%{name}/site-functions \
|
||||||
|
scriptdir=%{_datadir}/%{name}/%{version}/scripts \
|
||||||
|
sitescriptdir=%{_datadir}/%{name}/scripts \
|
||||||
|
runhelpdir=%{_datadir}/%{name}/%{version}/help
|
||||||
|
|
||||||
|
rm -f $RPM_BUILD_ROOT%{_bindir}/zsh-%{version}
|
||||||
|
rm -f $RPM_BUILD_ROOT%{_infodir}/dir
|
||||||
|
|
||||||
|
mkdir -p ${RPM_BUILD_ROOT}%{_sysconfdir}
|
||||||
|
for i in %{SOURCE1} %{SOURCE2} %{SOURCE3} %{SOURCE4} %{SOURCE5}; do
|
||||||
|
install -m 644 $i $RPM_BUILD_ROOT%{_sysconfdir}/"$(basename $i .rhs)"
|
||||||
|
done
|
||||||
|
|
||||||
|
mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/skel
|
||||||
|
install -m 644 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/skel/.zshrc
|
||||||
|
|
||||||
|
# This is just here to shut up rpmlint, and is very annoying.
|
||||||
|
# Note that we can't chmod everything as then rpmlint will complain about
|
||||||
|
# those without a she-bang line.
|
||||||
|
for i in checkmail harden run-help zcalc zkbd; do
|
||||||
|
sed -i -e 's!/usr/local/bin/zsh!%{_bindir}/zsh!' \
|
||||||
|
$RPM_BUILD_ROOT%{_datadir}/zsh/%{version}/functions/$i
|
||||||
|
chmod +x $RPM_BUILD_ROOT%{_datadir}/zsh/%{version}/functions/$i
|
||||||
|
done
|
||||||
|
|
||||||
|
|
||||||
|
%post
|
||||||
|
if [ "$1" = 1 ]; then
|
||||||
|
if [ ! -f %{_sysconfdir}/shells ] ; then
|
||||||
|
echo "%{_bindir}/%{name}" > %{_sysconfdir}/shells
|
||||||
|
echo "/bin/%{name}" >> %{_sysconfdir}/shells
|
||||||
|
else
|
||||||
|
grep -q "^%{_bindir}/%{name}$" %{_sysconfdir}/shells || echo "%{_bindir}/%{name}" >> %{_sysconfdir}/shells
|
||||||
|
grep -q "^/bin/%{name}$" %{_sysconfdir}/shells || echo "/bin/%{name}" >> %{_sysconfdir}/shells
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
if [ -f %{_infodir}/zsh.info.gz ]; then
|
||||||
|
# This is needed so that --excludedocs works.
|
||||||
|
/sbin/install-info %{_infodir}/zsh.info.gz %{_infodir}/dir \
|
||||||
|
--entry="* zsh: (zsh). An enhanced bourne shell."
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
%preun
|
||||||
|
if [ "$1" = 0 ] ; then
|
||||||
|
if [ -f %{_infodir}/zsh.info.gz ]; then
|
||||||
|
# This is needed so that --excludedocs works.
|
||||||
|
/sbin/install-info --delete %{_infodir}/zsh.info.gz %{_infodir}/dir \
|
||||||
|
--entry="* zsh: (zsh). An enhanced bourne shell."
|
||||||
|
fi
|
||||||
|
fi
|
||||||
|
|
||||||
|
%postun
|
||||||
|
if [ "$1" = 0 ] && [ -f %{_sysconfdir}/shells ] ; then
|
||||||
|
sed -i '\!^%{_bindir}/%{name}$!d' %{_sysconfdir}/shells
|
||||||
|
sed -i '\!^/bin/%{name}$!d' %{_sysconfdir}/shells
|
||||||
|
fi
|
||||||
|
|
||||||
|
|
||||||
|
%files
|
||||||
|
%doc README LICENCE Etc/BUGS Etc/CONTRIBUTORS Etc/FAQ FEATURES MACHINES
|
||||||
|
%doc NEWS Etc/zsh-development-guide Etc/completion-style-guide
|
||||||
|
%attr(755,root,root) %{_bindir}/zsh
|
||||||
|
%{_mandir}/*/*
|
||||||
|
%{_infodir}/*
|
||||||
|
%{_datadir}/zsh
|
||||||
|
%{_libdir}/zsh
|
||||||
|
%config(noreplace) %{_sysconfdir}/skel/.z*
|
||||||
|
%config(noreplace) %{_sysconfdir}/z*
|
||||||
|
|
||||||
|
%files html
|
||||||
|
%doc Doc/*.html
|
||||||
|
|
||||||
|
%changelog
|
||||||
|
* Mon Dec 17 2018 Kamil Dudka <kdudka@redhat.com> - 5.5.1-6
|
||||||
|
- return non-zero exit status on nested parse error (#1654989)
|
||||||
|
|
||||||
|
* Mon Nov 12 2018 Kamil Dudka <kdudka@redhat.com> - 5.5.1-5
|
||||||
|
- fix programming mistakes detected by static analysis (#1602743)
|
||||||
|
|
||||||
|
* Thu Oct 11 2018 Kamil Dudka <kdudka@redhat.com> - 5.5.1-4
|
||||||
|
- fix two security issues in shebang line parsing (CVE-2018-0502 CVE-2018-13259)
|
||||||
|
|
||||||
|
* Mon Jul 30 2018 Florian Weimer <fweimer@redhat.com> - 5.5.1-3
|
||||||
|
- Rebuild with fixed binutils
|
||||||
|
|
||||||
|
* Wed Jul 25 2018 Petr Kubat <pkubat@redhat.com> - 5.5.1-2
|
||||||
|
- Rebuilt for gdbm
|
||||||
|
|
||||||
|
* Tue Apr 17 2018 Kamil Dudka <kdudka@redhat.com> - 5.5.1-1
|
||||||
|
- update to latest upstream release
|
||||||
|
|
||||||
|
* Mon Apr 09 2018 Kamil Dudka <kdudka@redhat.com> - 5.5-1
|
||||||
|
- update to latest upstream release, which fixes the following vulnerabilities:
|
||||||
|
CVE-2018-1100 - stack-based buffer overflow in utils.c:checkmailpath()
|
||||||
|
CVE-2018-1083 - stack-based buffer overflow in compctl.c:gen_matches_files()
|
||||||
|
CVE-2018-1071 - stack-based buffer overflow in exec.c:hashcmd()
|
||||||
|
|
||||||
|
* Tue Mar 06 2018 Kamil Dudka <kdudka@redhat.com> - 5.4.2-7
|
||||||
|
- avoid crash when copying empty hash table (CVE-2018-7549)
|
||||||
|
- avoid NULL dereference when using ${(PA)...} on an empty array (CVE-2018-7548)
|
||||||
|
|
||||||
|
* Mon Feb 19 2018 Kamil Dudka <kdudka@redhat.com> - 5.4.2-6
|
||||||
|
- add explicit BR for the gcc compiler
|
||||||
|
|
||||||
|
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 5.4.2-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jan 22 2018 Kamil Dudka <kdudka@redhat.com> - 5.4.2-4
|
||||||
|
- make build of run-time loadable modules work again (#1535422)
|
||||||
|
|
||||||
|
* Tue Jan 16 2018 Kamil Dudka <kdudka@redhat.com> - 5.4.2-3
|
||||||
|
- rebuild against latest gdbm-devel (#1533176)
|
||||||
|
|
||||||
|
* Wed Oct 04 2017 Kamil Dudka <kdudka@redhat.com> - 5.4.2-2
|
||||||
|
- make the call depth limit configurable by $FUNCNEST (#1441092)
|
||||||
|
|
||||||
|
* Mon Aug 28 2017 Kamil Dudka <kdudka@redhat.com> - 5.4.2-1
|
||||||
|
- update to latest upstream release
|
||||||
|
|
||||||
|
* Wed Aug 09 2017 Kamil Dudka <kdudka@redhat.com> - 5.4.1-1
|
||||||
|
- update to latest upstream release
|
||||||
|
|
||||||
|
* Tue Aug 01 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-12
|
||||||
|
- use %%make_install instead of %%makeinstall, which is deprecated
|
||||||
|
- modernize spec file (Group tag, %%clean, %%defattr)
|
||||||
|
|
||||||
|
* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5.3.1-11
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
|
||||||
|
|
||||||
|
* Fri Jul 07 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-10
|
||||||
|
- enable parallel build
|
||||||
|
|
||||||
|
* Wed Jun 14 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-9
|
||||||
|
- fix unsafe use of a static buffer in history isearch (#1461483)
|
||||||
|
|
||||||
|
* Thu Jun 08 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-8
|
||||||
|
- make the zsh-html subpackage noarch (#1459657)
|
||||||
|
|
||||||
|
* Thu May 25 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-7
|
||||||
|
- drop unmaintained and undocumented zshprompt.pl script
|
||||||
|
|
||||||
|
* Wed May 17 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-6
|
||||||
|
- drop workaround for broken terminals over serial port (#56353)
|
||||||
|
|
||||||
|
* Thu May 11 2017 Kamil Dudka <kdudka@redhat.com> - 5.3.1-5
|
||||||
|
- compile with -fconserve-stack to prevent stack overflow (#1441092)
|
||||||
|
|
||||||
|
* Fri Mar 31 2017 Jason L Tibbitts III <tibbs@math.uh.edu> - 5.3.1-4
|
||||||
|
- Add build deps on gdbm-devel and pcre-devel. Pass --enable-pcre to
|
||||||
|
configure. These should ensure that the pcre and gdbm modules are built.
|
||||||
|
(#1438009)
|
||||||
|
|
||||||
|
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 5.3.1-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Dec 22 2016 Kamil Dudka <kdudka@redhat.com> - 5.3.1-2
|
||||||
|
- do not require the hostname package when being built on RHEL-6
|
||||||
|
|
||||||
|
* Wed Dec 21 2016 Kamil Dudka <kdudka@redhat.com> - 5.3.1-1
|
||||||
|
- Update to latest upstream release: Zsh 5.3.1
|
||||||
|
|
||||||
|
* Wed Dec 14 2016 Kamil Dudka <kdudka@redhat.com> - 5.3-2
|
||||||
|
- drop zsh-4.3.6-8bit-prompts.patch which was superseeded by an upstream patch
|
||||||
|
(see http://www.zsh.org/mla/users/2007/msg00468.html for details)
|
||||||
|
- drop undocumented zsh-test-C02-dev_fd-mock.patch
|
||||||
|
|
||||||
|
* Tue Dec 13 2016 Kamil Dudka <kdudka@redhat.com> - 5.3-1
|
||||||
|
- apply patches automatically to ease maintenance
|
||||||
|
- Update to latest upstream release: Zsh 5.3
|
||||||
|
|
||||||
|
* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 5.2-5
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jan 27 2016 Kamil Dudka <kdudka@redhat.com> - 5.2-4
|
||||||
|
- prevent zsh from crashing when printing the "out of memory" message (#1300958)
|
||||||
|
|
||||||
|
* Thu Jan 07 2016 Jason L Tibbitts III <tibbs@math.uh.edu> - 5.2-3
|
||||||
|
- Add patch to fix VCS_INFO_nbvsformats bug.
|
||||||
|
|
||||||
|
* Fri Dec 25 2015 Adrien Vergé <adrienverge@gmail.com> - 5.2-2
|
||||||
|
- update zsh completion script for dnf to the latest upstream version
|
||||||
|
|
||||||
|
* Thu Dec 03 2015 Kamil Dudka <kdudka@redhat.com> - 5.2-1
|
||||||
|
- Update to latest upstream release: Zsh 5.2
|
||||||
|
|
||||||
|
* Thu Nov 05 2015 Kamil Dudka <kdudka@redhat.com> - 5.1.1-3
|
||||||
|
- make loading of module's dependencies work again (#1277996)
|
||||||
|
|
||||||
|
* Thu Oct 08 2015 Kamil Dudka <kdudka@redhat.com> - 5.1.1-2
|
||||||
|
- fix crash in ksh mode with -n and $HOME (#1269883)
|
||||||
|
|
||||||
|
* Mon Sep 14 2015 Kamil Dudka <kdudka@redhat.com> - 5.1.1-1
|
||||||
|
- Update to latest upstream release: Zsh 5.1.1
|
||||||
|
|
||||||
|
* Mon Aug 31 2015 Kamil Dudka <kdudka@redhat.com> - 5.1-1
|
||||||
|
- Update to latest upstream release: Zsh 5.1
|
||||||
|
- remove outdated workarounds in %%check
|
||||||
|
|
||||||
|
* Thu Jul 30 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.8-6
|
||||||
|
- fix handling of command substitution in math context
|
||||||
|
|
||||||
|
* Wed Jul 22 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.8-5
|
||||||
|
- prevent infinite recursion in ihungetc() (#1245712)
|
||||||
|
|
||||||
|
* Tue Jul 07 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.8-4
|
||||||
|
- backport completion for dnf (#1239337)
|
||||||
|
|
||||||
|
* Thu Jul 02 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.8-3
|
||||||
|
- backport completion-related upstream fixes (#1238544)
|
||||||
|
|
||||||
|
* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.0.8-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
||||||
|
|
||||||
|
* Wed Jun 03 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.8-1
|
||||||
|
- Update to latest upstream release: Zsh 5.0.8
|
||||||
|
|
||||||
|
* Fri May 22 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.7-8
|
||||||
|
- fix SIGSEGV of the syntax check in ksh emulation mode (#1222867)
|
||||||
|
|
||||||
|
* Mon Apr 20 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.7-7
|
||||||
|
- fix SIGSEGV when handling heredocs and keyboard interrupt (#972624)
|
||||||
|
- queue signals when manipulating global state to avoid deadlock
|
||||||
|
|
||||||
|
* Sun Jan 25 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.7-6
|
||||||
|
- use correct allocation function in the new 'cd' code (#1183238)
|
||||||
|
|
||||||
|
* Fri Jan 23 2015 Kamil Dudka <kdudka@redhat.com> - 5.0.7-5
|
||||||
|
- suppress a warning about closing an already closed file descriptor (#1184002)
|
||||||
|
- improve handling of NULL in the 'cd' built-in (#1183238)
|
||||||
|
|
||||||
|
* Wed Nov 19 2014 Kamil Dudka <kdudka@redhat.com> - 5.0.7-4
|
||||||
|
- update documentation of POSIX_JOBS in the zshoptions.1 man page (#1162198)
|
||||||
|
|
||||||
|
* Tue Nov 18 2014 Kamil Dudka <kdudka@redhat.com> - 5.0.7-3
|
||||||
|
- replace an incorrect comment in /etc/zshenv (#1164313)
|
||||||
|
|
||||||
|
* Mon Nov 10 2014 Kamil Dudka <kdudka@redhat.com> - 5.0.7-2
|
||||||
|
- make the wait built-in work for already exited processes (#1162198)
|
||||||
|
|
||||||
|
* Wed Oct 08 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.7-1
|
||||||
|
- Update to latest upstream release: Zsh 5.0.7
|
||||||
|
|
||||||
|
* Thu Aug 28 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.6-1
|
||||||
|
- Update to latest upstream release: Zsh 5.0.6
|
||||||
|
|
||||||
|
* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.0.5-8
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jul 17 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.5-7
|
||||||
|
- apply upstream patch which fixes CPU load issue (RHBZ#1120424)
|
||||||
|
|
||||||
|
* Wed Jul 09 2014 Adam Jackson <ajax@redhat.com> 5.0.5-6
|
||||||
|
- Fix missing 'fi' in %%post
|
||||||
|
|
||||||
|
* Thu Jul 03 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.5-5
|
||||||
|
- improve handling of /etc/shells
|
||||||
|
|
||||||
|
* Wed Jul 02 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.5-4
|
||||||
|
- fix FTBFS issue (RHBZ#1106713)
|
||||||
|
- remove individual _bindir setting; install to /usr/bin/ (RHBZ#1034060)
|
||||||
|
- require info package instead of /sbin/install-info binary
|
||||||
|
|
||||||
|
* Sat Jun 07 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.0.5-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Apr 08 2014 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.5-1
|
||||||
|
- Update to latest upstream release: Zsh 5.0.5
|
||||||
|
|
||||||
|
* Thu Jan 16 2014 James Antill <james@fedoraproject.org> - 5.0.2-8
|
||||||
|
- Remove unneeded build require on tetex.
|
||||||
|
|
||||||
|
* Sat Oct 26 2013 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.2-7
|
||||||
|
- Require hostname package instead of /bin/hostname
|
||||||
|
|
||||||
|
* Tue Oct 22 2013 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.2-6
|
||||||
|
- remove systemd completion, it delivers it's own now (RHBZ#1022039)
|
||||||
|
|
||||||
|
* Thu Aug 01 2013 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.2-5
|
||||||
|
- update systemd completion (adds machinectl command)
|
||||||
|
|
||||||
|
* Tue Jun 25 2013 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.2-4
|
||||||
|
- up-to-date systemd completion (#949003)
|
||||||
|
- apply patch for building for aarch64 (#926864)
|
||||||
|
|
||||||
|
* Mon Apr 15 2013 James Antill <james@fedoraproject.org> - 5.0.2-3
|
||||||
|
- Fix the changelog dates.
|
||||||
|
- Fix the texi itemx bug.
|
||||||
|
- Resolves: bug#927863
|
||||||
|
|
||||||
|
* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 5.0.2-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
|
||||||
|
|
||||||
|
* Tue Jan 08 2013 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.2-1
|
||||||
|
- Update to new upstream version: Zsh 5.0.2
|
||||||
|
|
||||||
|
* Wed Nov 21 2012 Dominic Hopf <dmaphy@fedoraproject.org> - 5.0.0-1
|
||||||
|
- Update to new upstream version: Zsh 5.0.0
|
||||||
|
|
||||||
|
* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.17-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sun Mar 04 2012 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.17-1
|
||||||
|
- Update to new upstream version: Zsh 4.3.17
|
||||||
|
|
||||||
|
* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.15-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
|
||||||
|
|
||||||
|
* Sat Dec 24 2011 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.15-1
|
||||||
|
- Update to new upstream version: Zsh 4.3.15
|
||||||
|
|
||||||
|
* Sat Dec 17 2011 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.14-2
|
||||||
|
- change the License field to MIT (RHBZ#768548)
|
||||||
|
|
||||||
|
* Sat Dec 10 2011 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.14-1
|
||||||
|
- Update to new upstream version: Zsh 4.3.14
|
||||||
|
|
||||||
|
* Sat Dec 03 2011 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.13-1
|
||||||
|
- Update to new upstream version: Zsh 4.3.13
|
||||||
|
|
||||||
|
* Sat Aug 13 2011 Dominic Hopf <dmaphy@fedoraproject.org> - 4.3.12-1
|
||||||
|
- Update to new upstream version: Zsh 4.3.12
|
||||||
|
|
||||||
|
* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.11-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
|
||||||
|
|
||||||
|
* Thu Jan 20 2011 Christopher Ailon <caillon@redhat.com> - 4.3.11-1
|
||||||
|
- Rebase to upstream version 4.3.11
|
||||||
|
|
||||||
|
* Tue Dec 7 2010 Toshio Kuratomi <toshio@fedoraproject.org> - 4.3.10-6
|
||||||
|
- Rebuild for FTBFS https://bugzilla.redhat.com/show_bug.cgi?id=631197
|
||||||
|
- Remove deprecated PreReq, the packages aren't needed at runtime and they're
|
||||||
|
already in Requires(post,preun,etc): lines.
|
||||||
|
|
||||||
|
* Mon Mar 22 2010 James Antill <james@fedoraproject.org> - 4.3.10-5
|
||||||
|
- Add pathmunge to our /etc/zshrc, for profile.d compat.
|
||||||
|
- Resolves: bug#548960
|
||||||
|
|
||||||
|
* Fri Aug 7 2009 James Antill <james@fedoraproject.org> - 4.3.10-4
|
||||||
|
- Allow --excludedocs command to work!
|
||||||
|
- Resolves: bug#515986
|
||||||
|
|
||||||
|
* Mon Jul 27 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.10-3
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
|
||||||
|
|
||||||
|
* Mon Jul 20 2009 James Antill <james@fedoraproject.org> - 4.3.10-1
|
||||||
|
- Import new upstream 4.3.10
|
||||||
|
|
||||||
|
* Wed Jun 10 2009 Karsten Hopp <karsten@redhat.com> 4.3.9-4.1
|
||||||
|
- skip D02glob test on s390, too
|
||||||
|
|
||||||
|
* Mon Mar 2 2009 James Antill <james@fedoraproject.org> - 4.3.9-4
|
||||||
|
- Remove D02glob testcase on ppc/ppc64, and hope noone cares
|
||||||
|
|
||||||
|
* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 4.3.9-2
|
||||||
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
|
||||||
Loading…
Reference in New Issue
Block a user