Re: [yocto] [OE-core] [PATCH] bash: update to latest (025) patchset (fixes CVE-2014-6271)

2014-09-26 Thread Mark Hatle
On 9/25/14, 10:00 PM, Francesco Del Degan wrote: Yes, patch 026 that fixes CVE-2014-7169 is underway, should be pushed out today: http://www.openwall.com/lists/oss-security/2014/09/26/1 bash-4.2 (as in dora) got patch048 for CVE-2014-6179 and should receive patch049 as well. I'm going to send

Re: [yocto] [OE-core] [PATCH] bash: update to latest (025) patchset (fixes CVE-2014-6271)

2014-09-25 Thread Burton, Ross
On 25 September 2014 23:48, Mark Hatle mark.ha...@windriver.com wrote: So I would recommend that someone get the 025 patch (don't forget to patch bash 3.2 as well) in.. and we should wait until their is an official one for 7169. Agreed, and patches sent. Ross --

Re: [yocto] [OE-core] [PATCH] bash: update to latest (025) patchset (fixes CVE-2014-6271)

2014-09-25 Thread Francesco Del Degan
Yes, patch 026 that fixes CVE-2014-7169 is underway, should be pushed out today: http://www.openwall.com/lists/oss-security/2014/09/26/1 bash-4.2 (as in dora) got patch048 for CVE-2014-6179 and should receive patch049 as well. I'm going to send bash 3.2 and 4.2 patches in oe core ml. On Fri,