Via Arch Linux[1], as explained here: http://lists.gnu.org/archive/html/bug-bash/2013-03/msg00047.html
Comments and/or OKs? [1] https://projects.archlinux.org/svntogit/packages.git/tree/trunk?h=packages/bash Index: Makefile =================================================================== RCS file: /cvs/ports/shells/bash/Makefile,v retrieving revision 1.77 diff -u -p -u -p -r1.77 Makefile --- Makefile 12 Mar 2013 19:55:08 -0000 1.77 +++ Makefile 13 Dec 2013 12:40:48 -0000 @@ -4,6 +4,7 @@ COMMENT= GNU Bourne Again Shell DISTNAME= bash-4.2 PKGNAME= ${DISTNAME}.45 +REVISION= 0 CATEGORIES= shells HOMEPAGE= http://cnswww.cns.cwru.edu/~chet/bash/bashtop.html Index: patches/patch-general_c =================================================================== RCS file: patches/patch-general_c diff -N patches/patch-general_c --- /dev/null 1 Jan 1970 00:00:00 -0000 +++ patches/patch-general_c 13 Dec 2013 12:40:48 -0000 @@ -0,0 +1,16 @@ +$OpenBSD$ + +Do not use memcpy() on overlapping memory +http://lists.gnu.org/archive/html/bug-bash/2013-03/msg00047.html + +--- general.c.orig Sun Dec 12 21:06:27 2010 ++++ general.c Fri Dec 13 13:33:03 2013 +@@ -766,7 +766,7 @@ trim_pathname (name, maxlen) + *nbeg++ = '.'; + + nlen = nend - ntail; +- memcpy (nbeg, ntail, nlen); ++ memmove (nbeg, ntail, nlen); + nbeg[nlen] = '\0'; + + return name;