Yes, patch 026 that fixes CVE-2014-7169 is underway, should be pushed out today:
http://www.openwall.com/lists/oss-security/2014/09/26/1 bash-4.2 (as in dora) got patch048 for CVE-2014-6179 and should receive patch049 as well. I'm going to send bash 3.2 and 4.2 patches in oe core ml. On Fri, Sep 26, 2014 at 1:15 AM, Burton, Ross <ross.bur...@intel.com> wrote: > On 25 September 2014 23:48, Mark Hatle <mark.ha...@windriver.com> wrote: > > So I would recommend that someone get the 025 patch (don't forget to > patch > > bash 3.2 as well) in.. and we should wait until their is an official one > for > > 7169. > > Agreed, and patches sent. > > Ross > -- > _______________________________________________ > yocto mailing list > yocto@yoctoproject.org > https://lists.yoctoproject.org/listinfo/yocto > -- -- :: e n d i a n :: security with passion :: Francesco Del Degan :: software engineer :: http://www.endian.com :: f.deldegan (AT) endian.com
-- _______________________________________________ yocto mailing list yocto@yoctoproject.org https://lists.yoctoproject.org/listinfo/yocto