Re: Security alert bash shellshock cve-2014-7169

--===============6001704927505536222==
Content-Type: multipart/alternative; boundary=001a113418062fed730503fe8322

--001a113418062fed730503fe8322
Content-Type: text/plain; charset=UTF-8

Hello,

No, not yet.  We are waiting on the bash developers.
>>
>
> You can apply bash43-025 from https://ftp.gnu.org/gnu/bash/
> bash-4.3-patches/, but that does not completely fix the problem.


I personnally used patches from Fedora 21 that fix CVE-2014-7169

You can find them in this SRPM file (need to extract package to grab the
patches) :
https://kojipkgs.fedoraproject.org//packages/bash/4.3.25/2.fc21/src/bash-4.3.25-2.fc21.src.rpm

Olivier

--001a113418062fed730503fe8322
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hello,<div><br><div><div><div class=3D"gmail_extra"><div c=
lass=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px =
0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);bord=
er-left-style:solid;padding-left:1ex"><span class=3D""><blockquote class=3D=
"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left-width:1px;borde=
r-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">No,=
 not yet.=C2=A0 We are waiting on the bash developers.<br></blockquote></sp=
an>
<br>
You can apply bash43-025 from <a href=3D"https://ftp.gnu.org/gnu/bash/bash-=
4.3-patches/" target=3D"_blank">https://ftp.gnu.org/gnu/bash/<u></u>bash-4.=
3-patches/</a>, but that does not completely fix the problem.</blockquote><=
div>=C2=A0</div><div>I personnally used patches from Fedora 21 that fix=C2=
=A0CVE-2014-7169</div><div><br></div><div>You can find them in this SRPM fi=
le (need to extract package to grab the patches) :</div><div><a href=3D"htt=
ps://kojipkgs.fedoraproject.org//packages/bash/4.3.25/2.fc21/src/bash-4.3.2=
5-2.fc21.src.rpm">https://kojipkgs.fedoraproject.org//packages/bash/4.3.25/=
2.fc21/src/bash-4.3.25-2.fc21.src.rpm</a><br></div><div><br></div><div>Oliv=
ier</div></div></div></div></div></div></div>

--001a113418062fed730503fe8322--

--===============6001704927505536222==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-- 
http://lists.linuxfromscratch.org/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

--===============6001704927505536222==--