[oe-commits] Mark Hatle : bash: Upgrade bash to latest patch level to fix CVEs
git at git.openembedded.org
git at git.openembedded.org
Mon Oct 6 14:16:28 UTC 2014
Module: openembedded-core.git
Branch: master-next
Commit: 43deeff0c6b0ea7729d3e5f1887dfd1647dea1da
URL: http://git.openembedded.org/?p=openembedded-core.git&a=commit;h=43deeff0c6b0ea7729d3e5f1887dfd1647dea1da
Author: Mark Hatle <mark.hatle at windriver.com>
Date: Fri Oct 3 09:51:25 2014 -0500
bash: Upgrade bash to latest patch level to fix CVEs
We upgrade bash_4.3 to patch revision 29, and bash_3.2.48 to 56.
There are numerous community bug fixes included with this set, but the key
items are:
bash32-052 CVE-2014-6271 9/24/2014
bash32-053 CVE-2014-7169 9/26/2014
bash32-054 exported function namespace change 9/27/2014
bash32-055 CVE-2014-7186/CVE-2014-7187 10/1/2014
bash32-056 CVE-2014-6277 10/2/2014
bash43-025 CVE-2014-6271 9/24/2014
bash43-026 CVE-2014-7169 9/26/2014
bash43-027 exported function namespace change 9/27/2014
bash43-028 CVE-2014-7186/CVE-2014-7187 10/1/2014
bash43-029 CVE-2014-6277 10/2/2014
Signed-off-by: Mark Hatle <mark.hatle at windriver.com>
Signed-off-by: Richard Purdie <richard.purdie at linuxfoundation.org>
---
.../bash/bash-3.2.48/cve-2014-6271.patch | 77 --------------
.../bash/bash-3.2.48/cve-2014-7169.patch | 16 ---
.../recipes-extended/bash/bash/cve-2014-6271.patch | 114 ---------------------
.../recipes-extended/bash/bash/cve-2014-7169.patch | 16 ---
meta/recipes-extended/bash/bash_3.2.48.bb | 38 ++++---
meta/recipes-extended/bash/bash_4.3.bb | 90 +++++++++++++++-
6 files changed, 112 insertions(+), 239 deletions(-)
Diff: http://git.openembedded.org/?p=openembedded-core.git/?a=commitdiff;h=43deeff0c6b0ea7729d3e5f1887dfd1647dea1da
More information about the Openembedded-commits
mailing list