Path to this page:
Subject: CVS commit: [pkgsrc-2014Q3] pkgsrc/shells/bash
From: Matthias Scheler
Date: 2014-10-07 10:46:57
Message id: 20141007084657.DD17298@cvs.netbsd.org
Log Message:
Pullup ticket #4517 - requested by wiz
shells/bash: security update
Revisions pulled up:
- shells/bash/Makefile 1.72
- shells/bash/distinfo 1.38
---
Module Name: pkgsrc
Committed By: wiz
Date: Tue Oct 7 00:16:52 UTC 2014
Modified Files:
pkgsrc/shells/bash: Makefile distinfo
Log Message:
Another day, another bash patch. Welcome to 4.3.030.
Fixes CVE-2014-6278:
A combination of nested command substitutions and function importing
from the environment can cause bash to execute code appearing in
the environment variable value following the function definition.
Files: