Hu Francesco, On 25 September 2014 11:35, Francesco Del Degan <f.delde...@endian.com> wrote: > Updated to reflect the latest patchset in bash 4.3. > Fixes the CVE-2014-6271.
I'm hearing that this isn't a complete fix, so lets wait for more patches. Is it possible to cherry-pick just the security fixes, instead of every patch they've released? Finally, patches for oe-core should go to openembedded-core@, not yocto@. Ross -- _______________________________________________ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto