oss-sec mailing list archives

Re: more bash parser bugs (CVE-2014-6277, CVE-2014-6278)


From: Chet Ramey <chet.ramey () case edu>
Date: Wed, 01 Oct 2014 17:08:42 -0400

On 10/1/14, 5:04 PM, Shawn wrote:
http://ftp.gnu.org/gnu/bash/bash-4.3-patches/bash43-028

Nope, this one fixes 7168/7169.  It's the equivalent of the
`parser-oob' patch.

I have patches that fix 6277/6278 that are in the pipeline.

-- 
``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    chet () case edu    http://cnswww.cns.cwru.edu/~chet/


Current thread: