]> code.ossystems Code Review - openembedded-core.git/commit
bash: Upgrade bash to latest patch level to fix CVEs
authorMark Hatle <mark.hatle@windriver.com>
Fri, 3 Oct 2014 14:51:25 +0000 (09:51 -0500)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 6 Oct 2014 14:07:59 +0000 (15:07 +0100)
commit43deeff0c6b0ea7729d3e5f1887dfd1647dea1da
treec6a6c513d0a9c064b0a51b52c57589fdaf193de7
parentb2c6a032d6e5deb07e76ed75fcd0931fad6a748c
bash: Upgrade bash to latest patch level to fix CVEs

We upgrade bash_4.3 to patch revision 29, and bash_3.2.48 to 56.

There are numerous community bug fixes included with this set, but the key
items are:

bash32-052      CVE-2014-6271                           9/24/2014
bash32-053      CVE-2014-7169                           9/26/2014
bash32-054      exported function namespace change      9/27/2014
bash32-055      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash32-056      CVE-2014-6277                           10/2/2014

bash43-025      CVE-2014-6271                           9/24/2014
bash43-026      CVE-2014-7169                           9/26/2014
bash43-027      exported function namespace change      9/27/2014
bash43-028      CVE-2014-7186/CVE-2014-7187             10/1/2014
bash43-029      CVE-2014-6277                           10/2/2014

Signed-off-by: Mark Hatle <mark.hatle@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/bash/bash-3.2.48/cve-2014-6271.patch [deleted file]
meta/recipes-extended/bash/bash-3.2.48/cve-2014-7169.patch [deleted file]
meta/recipes-extended/bash/bash/cve-2014-6271.patch [deleted file]
meta/recipes-extended/bash/bash/cve-2014-7169.patch [deleted file]
meta/recipes-extended/bash/bash_3.2.48.bb
meta/recipes-extended/bash/bash_4.3.bb