Re: bash security update (CVE-2014-6271)

--qjNfmADvan18RZcF
Content-Type: multipart/mixed; boundary="yEPQxsgoJgBvi8ip"
Content-Disposition: inline


--yEPQxsgoJgBvi8ip
Content-Type: text/plain; charset=koi8-r
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On 25-Sep-2014 12:24:17 +0400, [email protected] wrote:

 >> There are updated bash packages in Owl-current built for i686
 >> and x86_64, fixing a critical vulnerability.

 > As usual, less than in a day since publishing :-)

When updating slightly older versions of Owl, I've got a error
on `find` invocation. Here's trivial patch:

--- bash.spec.old       2014-09-25 05:22:12 +0400
+++ bash.spec   2014-09-25 14:55:16 +0400
@@ -178,8 +178,8 @@
 install -pm644 doc/*.html %buildroot%docdir/html/
 install -pm644 doc/*.ps %buildroot%docdir/ps/
 install -pm644 doc/*.txt %buildroot%docdir/txt/
-find %buildroot%docdir/{[A-Z],txt/}* -type f -size +8k -print0 |
-       xargs -r0 bzip2 -9 --
+find %buildroot%docdir{,/txt}/* -type f -maxdepth 0 -size +8k \
+       -execdir bzip2 -9 -- '{}' ';'
 gzip -9nf %buildroot%docdir/ps/*.ps
 cp -a examples %buildroot%docdir/
 find %buildroot%docdir/examples/ -type f -name 'Makefile*' -delete



--=20
Alexey V. Vissarionov aka Gremlin from Kremlin <gremlin =F0=F2=E9 gremlin =
=F4=FE=EB ru>
GPG: 8832FE9FA791F7968AC96E4E909DAC45EF3B1FA8 @ hkp://keys.gnupg.net

--yEPQxsgoJgBvi8ip
Content-Type: text/plain; charset=koi8-r
Content-Disposition: attachment; filename="bash.spec.diff"

--- bash.spec.old       2014-09-25 05:22:12 +0400
+++ bash.spec   2014-09-25 14:55:16 +0400
@@ -178,8 +178,8 @@
 install -pm644 doc/*.html %buildroot%docdir/html/
 install -pm644 doc/*.ps %buildroot%docdir/ps/
 install -pm644 doc/*.txt %buildroot%docdir/txt/
-find %buildroot%docdir/{[A-Z],txt/}* -type f -size +8k -print0 |
-       xargs -r0 bzip2 -9 --
+find %buildroot%docdir{,/txt}/* -type f -maxdepth 0 -size +8k \
+       -execdir bzip2 -9 -- '{}' ';'
 gzip -9nf %buildroot%docdir/ps/*.ps
 cp -a examples %buildroot%docdir/
 find %buildroot%docdir/examples/ -type f -name 'Makefile*' -delete

--yEPQxsgoJgBvi8ip--

--qjNfmADvan18RZcF
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
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=+HcM
-----END PGP SIGNATURE-----

--qjNfmADvan18RZcF--