[ubuntu/bionic-proposed] zsh 5.4.2-3ubuntu3 (Accepted)

[Leonidas S. Barbosa]

zsh (5.4.2-3ubuntu3) bionic; urgency=medium

  * SECURITY UPDATE: stack-based buffer overflow
    - debian/patches/CVE-2018-1071.patch: check bounds when
      copying patch in hashcmd() in Src/exec.c, Src/utils.c.
    - CVE-2018-1071
  * SECURITY UPDATE: buffer-overflow
    - debian/patches/CVE-2018-1083.patch: check bounds on PATH_MAX
      buffer in Src/Zle/compctl.c.
    - CVE-2018-1083

Date: Fri, 06 Apr 2018 12:01:55 -0300
Changed-By: leo.barbosa at canonical.com (Leonidas S. Barbosa)
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/+source/zsh/5.4.2-3ubuntu3
-------------- next part --------------
Format: 1.8
Date: Fri, 06 Apr 2018 12:01:55 -0300
Source: zsh
Binary: zsh-common zsh zsh-doc zsh-static zsh-dev
Architecture: source
Version: 5.4.2-3ubuntu3
Distribution: bionic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Leonidas S. Barbosa <leo.barbosa at canonical.com>
Description:
 zsh        - shell with lots of features
 zsh-common - architecture independent files for Zsh
 zsh-dev    - shell with lots of features (development files)
 zsh-doc    - zsh documentation - info/HTML format
 zsh-static - shell with lots of features (static link)
Changes:
 zsh (5.4.2-3ubuntu3) bionic; urgency=medium
 .
   * SECURITY UPDATE: stack-based buffer overflow
     - debian/patches/CVE-2018-1071.patch: check bounds when
       copying patch in hashcmd() in Src/exec.c, Src/utils.c.
     - CVE-2018-1071
   * SECURITY UPDATE: buffer-overflow
     - debian/patches/CVE-2018-1083.patch: check bounds on PATH_MAX
       buffer in Src/Zle/compctl.c.
     - CVE-2018-1083
Checksums-Sha1:
 881dcd87905698b5daf619f4ffe0c7dde5f551db 2591 zsh_5.4.2-3ubuntu3.dsc
 4369b24aa38c2fbf580fd7405792eace820e518b 81300 zsh_5.4.2-3ubuntu3.debian.tar.xz
 65b2f174e7b80a7fcc970d3f35bf005ec01210c3 8816 zsh_5.4.2-3ubuntu3_source.buildinfo
Checksums-Sha256:
 e94009d1570cf2e52d878db5212c059ff26dbb2ad24c52f6a3928adb3e89287c 2591 zsh_5.4.2-3ubuntu3.dsc
 56be8b03fc8b7f90aced466565a6a11e26175382f9ab616630cc174ace3a87d9 81300 zsh_5.4.2-3ubuntu3.debian.tar.xz
 596103ad195fb7f8526a80c1a2fb2009e05588ecb3442db7038a269672d42225 8816 zsh_5.4.2-3ubuntu3_source.buildinfo
Files:
 dbbe3d1a0346c999374ab0a6a3289820 2591 shells optional zsh_5.4.2-3ubuntu3.dsc
 cb6719e963fd4b25ce5c8368b43e55db 81300 shells optional zsh_5.4.2-3ubuntu3.debian.tar.xz
 32adeb1a52746fd7bf9d794e0c82be33 8816 shells optional zsh_5.4.2-3ubuntu3_source.buildinfo
Original-Maintainer: Debian Zsh Maintainers <pkg-zsh-devel at lists.alioth.debian.org>