Re: [gentoo-user] [Security] Update bash *NOW*

2014-09-25 Thread Walter Dnes
On Thu, Sep 25, 2014 at 01:54:10PM +0100, Kerin Millar wrote
> On 25/09/2014 02:58, Walter Dnes wrote:
> 
> [snip]
> 
> > ...with malicious stuff, and it could get ugly.  app-shells/bash-4.2_p48
> > has been pushed to Gentoo stable.  The same "env" command results in...
> 
> Unfortunately, that version did fully address the problem. Instead, 
> upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were 
> recently committed. For further details:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=523592
> 
> --Kerin

  OK, I've got app-shells/bash-4.2_p48-r1 installed now.

-- 
Walter Dnes 
I don't run "desktop environments"; I run useful applications



Re: [gentoo-user] [Security] Update bash *NOW*

2014-09-25 Thread Tomas Mozes

On 2014-09-25 16:02, cov...@ccs.covici.com wrote:

Kerin Millar  wrote:


On 25/09/2014 02:58, Walter Dnes wrote:

[snip]

> ...with malicious stuff, and it could get ugly.  app-shells/bash-4.2_p48
> has been pushed to Gentoo stable.  The same "env" command results in...

Unfortunately, that version did fully address the problem. Instead,
upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were
recently committed. For further details:

https://bugs.gentoo.org/show_bug.cgi?id=523592

I cannot update to that, its not in the tree as of last night.


Try to rsync from some other mirror.



Re: [gentoo-user] [Security] Update bash *NOW*

2014-09-25 Thread covici
Kerin Millar  wrote:

> On 25/09/2014 02:58, Walter Dnes wrote:
> 
> [snip]
> 
> > ...with malicious stuff, and it could get ugly.  app-shells/bash-4.2_p48
> > has been pushed to Gentoo stable.  The same "env" command results in...
> 
> Unfortunately, that version did fully address the problem. Instead,
> upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were
> recently committed. For further details:
> 
> https://bugs.gentoo.org/show_bug.cgi?id=523592
I cannot update to that, its not in the tree as of last night.

-- 
Your life is like a penny.  You're going to lose it.  The question is:
How do
you spend it?

 John Covici
 cov...@ccs.covici.com



Re: [gentoo-user] [Security] Update bash *NOW*

2014-09-25 Thread Kerin Millar

On 25/09/2014 13:54, Kerin Millar wrote:

On 25/09/2014 02:58, Walter Dnes wrote:

[snip]


...with malicious stuff, and it could get ugly.  app-shells/bash-4.2_p48
has been pushed to Gentoo stable.  The same "env" command results in...


Unfortunately, that version did fully address the problem. Instead,
upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were
recently committed. For further details:

https://bugs.gentoo.org/show_bug.cgi?id=523592



Oops. Obviously, I meant to write "did not fully address the problem".

--Kerin



Re: [gentoo-user] [Security] Update bash *NOW*

2014-09-25 Thread Kerin Millar

On 25/09/2014 02:58, Walter Dnes wrote:

[snip]


...with malicious stuff, and it could get ugly.  app-shells/bash-4.2_p48
has been pushed to Gentoo stable.  The same "env" command results in...


Unfortunately, that version did fully address the problem. Instead, 
upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were 
recently committed. For further details:


https://bugs.gentoo.org/show_bug.cgi?id=523592

--Kerin