oss-security - RE: Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <3230301C09DEF9499B442BBE162C5E48ABE4A610@SESTOEX04.enea.se>
Date: Mon, 10 Oct 2016 08:01:15 +0000
From: Sona Sarmadi <sona.sarmadi@...a.com>
To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com>, "Leo
 Famulari" <leo@...ulari.name>
CC: "john.haxby@...cle.com" <john.haxby@...cle.com>
Subject: RE: Re: CVE-2016-0634 -- bash prompt expanding
 $HOSTNAME

Hi Chet,

> > Thanks for the patch! Do you plan to add it to the bash-4.3-patches
> > series [0]?
> 
> This went out as bash-4.3 patch 47.

Where can we find patch 47 for bash-4.3? 

commit a0c0a00fc419b7bc08202a79134fcd5bc0427071
Author: Chet Ramey <chet.ramey@...e.edu>
Date:   Thu Sep 15 16:59:08 2016 -0400

    Bash-4.4 distribution sources and documentation

commit 30a978b7d808c067219c95be88c4979b6a7aa251
Author: Chet Ramey <chet.ramey@...e.edu>
Date:   Mon Jun 20 15:14:49 2016 -0400

    Bash-4.3 patch 46

Thanks
//Sona

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.