Commit Graph

6 Commits

Author SHA1 Message Date
Juan RP 3098184499 bash: apply 3rd patch for CVE-2014-7169 from Fedora too. 2014-09-28 12:07:34 +02:00
Juan RP 53418864fb bash: drop NetBSD patches now that CVE-2014-7186 has a patch. 2014-09-28 11:59:00 +02:00
Juan RP 1c22f1e6f3 bash: apply NetBSD patches to disable importing functions from environment.
This avoids completely shellshock.

1)
 $NetBSD: patch-shell.c,v 1.1 2014/09/25 20:28:32 christos Exp $
 Add flag to disable importing of function unless explicitly enabled

2)
 $NetBSD: patch-variables.c,v 1.1 2014/09/25 20:28:32 christos Exp $
 Only read functions from environment if flag is set.
2014-09-27 06:36:58 +02:00
Juan RP c2063e026e bash: update to 4.3 patchlevel 026 (fixes CVE-2014-7169). 2014-09-27 03:19:21 +02:00
Juan RP 2dd9420b25 bash: update to patchlevel 025 and apply 2nd patch for CVE-2014-6271.
See http://seclists.org/oss-sec/2014/q3/690
2014-09-25 20:29:21 +02:00
Juan RP 554baa4d3e bash: patch for CVE-2014-6271 via Novell. 2014-09-24 16:26:29 +02:00