StackPatch is live — CVE patch ops for indie SaaS, $99 lifetime founder seat (50 only).See product

Back to CVE digest

Package · zsh

`zsh` CVE matrix across Linux distros

68 CVEs tracked across 8 distro releases. Showing the 68 most-recent fix records.

Ecosystems with tracked fixes

Alpine edgeAlpine v3.18Alpine v3.19Alpine v3.20Alpine v3.21Debian bookwormDebian bullseyeDebian trixie

Recent fix records

Each row links to the full per-CVE cross-distro view. Sorted most-recent first.

Debian bullseye

Source: Debian

CVE-2007-6209→ fixed in4.3.4-dev-3-2
CVE-2014-10070→ fixed in5.0.7-3
CVE-2014-10071→ fixed in5.0.7-3
CVE-2014-10072→ fixed in5.0.6-1
CVE-2016-10714→ fixed in5.3-1
CVE-2017-18205→ fixed in5.4.1-1
CVE-2017-18206→ fixed in5.4.1-1
CVE-2018-0502→ fixed in5.6-1
+8 more in Debian bullseye

Single command to patch all of these:

sudo apt-get install --only-upgrade -y zsh

Debian bookworm

Source: Debian

CVE-2007-6209→ fixed in4.3.4-dev-3-2
CVE-2014-10070→ fixed in5.0.7-3
CVE-2014-10071→ fixed in5.0.7-3
CVE-2014-10072→ fixed in5.0.6-1
CVE-2016-10714→ fixed in5.3-1
CVE-2017-18205→ fixed in5.4.1-1
CVE-2017-18206→ fixed in5.4.1-1
CVE-2018-0502→ fixed in5.6-1
+8 more in Debian bookworm

Single command to patch all of these:

sudo apt-get install --only-upgrade -y zsh

Debian trixie

Source: Debian

CVE-2007-6209→ fixed in4.3.4-dev-3-2
CVE-2014-10070→ fixed in5.0.7-3
CVE-2014-10071→ fixed in5.0.7-3
CVE-2014-10072→ fixed in5.0.6-1
CVE-2016-10714→ fixed in5.3-1
CVE-2017-18205→ fixed in5.4.1-1
CVE-2017-18206→ fixed in5.4.1-1
CVE-2018-0502→ fixed in5.6-1
+8 more in Debian trixie

Single command to patch all of these:

sudo apt-get install --only-upgrade -y zsh

Alpine v3.20

Source: Alpine secdb

CVE-2018-1071→ fixed in5.4.2-r1
CVE-2018-1083→ fixed in5.4.2-r1
CVE-2019-20044→ fixed in5.8-r0
CVE-2021-45444→ fixed in5.8.1-r0

Single command to patch all of these:

apk add --upgrade zsh

Alpine v3.21

Source: Alpine secdb

CVE-2018-1071→ fixed in5.4.2-r1
CVE-2018-1083→ fixed in5.4.2-r1
CVE-2019-20044→ fixed in5.8-r0
CVE-2021-45444→ fixed in5.8.1-r0

Single command to patch all of these:

apk add --upgrade zsh

Alpine edge

Source: Alpine secdb

CVE-2018-1071→ fixed in5.4.2-r1
CVE-2018-1083→ fixed in5.4.2-r1
CVE-2019-20044→ fixed in5.8-r0
CVE-2021-45444→ fixed in5.8.1-r0

Single command to patch all of these:

apk add --upgrade zsh

Alpine v3.18

Source: Alpine secdb

CVE-2018-1071→ fixed in5.4.2-r1
CVE-2018-1083→ fixed in5.4.2-r1
CVE-2019-20044→ fixed in5.8-r0
CVE-2021-45444→ fixed in5.8.1-r0

Single command to patch all of these:

apk add --upgrade zsh

Alpine v3.19

Source: Alpine secdb

CVE-2018-1071→ fixed in5.4.2-r1
CVE-2018-1083→ fixed in5.4.2-r1
CVE-2019-20044→ fixed in5.8-r0
CVE-2021-45444→ fixed in5.8.1-r0

Single command to patch all of these:

apk add --upgrade zsh

Is YOUR zsh patched?

5-second check on your actual server. The quickscan reads your installed zsh version and matches against the same 68-CVE catalog above.

curl https://mindsparkstack.com/scan.sh | bash

Form-based quickscan Continuous monitoring ($99 lifetime)