Skip to content

Fixes for recent bash CVE backports

Paul Eggleton openembedded-core 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest2 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/2bash: add missing patch for CVE-2014-6271 to 4.2 recipemeta/recipes-extended/bash/bash-4.2/cve-2014-6271.patch meta/recipes-extended/bash/bash_4.2.bb+96 -00 replies
2/2bash: add missing patch for CVE-2014-7169 to 4.2 recipemeta/recipes-extended/bash/bash-4.2/cve-2014-7169.patch meta/recipes-extended/bash/bash_4.2.bb+17 -00 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [dora][PATCH 0/2] Fixes for recent bash CVE backports

Fixes for the patches being missed from the 4.2 recipes when the CVE patches were backported.

The following changes since commit 1c8f43767c7d78872d38652ea808f30ea825bbef:

bash: Fix CVE-2014-7169 (2014-10-02 00:03:41 -0700)

are available in the git repository at:

git://git.openembedded.org/openembedded-core-contrib paule/dora-bash-cve-backport-fixes
http://cgit.openembedded.org/cgit.cgi/openembedded-core-contrib/log/?h=paule/dora-bash-cve-backport-fixes

Paul Eggleton (2):
bash: add missing patch for CVE-2014-6271 to 4.2 recipe
bash: add missing patch for CVE-2014-7169 to 4.2 recipe

 .../bash/bash-4.2/cve-2014-6271.patch              | 95 ++++++++++++++++++++++
 .../bash/bash-4.2/cve-2014-7169.patch              | 16 ++++
 meta/recipes-extended/bash/bash_4.2.bb             |  2 +
 3 files changed, 113 insertions(+)
 create mode 100644 meta/recipes-extended/bash/bash-4.2/cve-2014-6271.patch
 create mode 100644 meta/recipes-extended/bash/bash-4.2/cve-2014-7169.patch
Signature · 1 line
1.9.3

Read the cover letter in its thread