Thanks Chet very much for your confirmation! If the commit fixs the CVE-2019-18276, why is it merged to the master branch?
Thanks, Mingli ________________________________________ From: Chet Ramey [chet.ra...@case.edu] Sent: Tuesday, March 03, 2020 9:55 PM To: Yu, Mingli; Mittal, Anuj; richard.pur...@linuxfoundation.org; openembedded-core@lists.openembedded.org; Huo, De; pr...@electromag.com.au; akuster...@gmail.com Cc: chet.ra...@case.edu Subject: Re: [OE-core] bash: Fix CVE-2019-18276 On 3/2/20 10:11 PM, Yu, Mingli wrote: > Does > https://git.savannah.gnu.org/cgit/bash.git/commit/?h=devel&id=951bdaad7a18cc0dc1036bba86b18b90874d39ff > fix the issue reported in CVE-2019-18276? Could you help to provide some > info here? Yes, the changes from 6/27 fix the issue in the CVE. -- ``The lyf so short, the craft so long to lerne.'' - Chaucer ``Ars longa, vita brevis'' - Hippocrates Chet Ramey, UTech, CWRU c...@case.edu http://tiswww.cwru.edu/~chet/ -- _______________________________________________ Openembedded-core mailing list Openembedded-core@lists.openembedded.org http://lists.openembedded.org/mailman/listinfo/openembedded-core
