diff options
| author |   Catalin Popeanga <Catalin.Popeanga@enea.com> | 2014-10-09 14:23:24 +0200 |
|---|---|---|
| committer |   Paul Eggleton <paul.eggleton@linux.intel.com> | 2014-10-10 17:56:32 +0100 |
| commit | 6c51cc96d03df26d1c10867633e7a10dfbec7c45 (patch) | |
| tree | 2d4dfc827f5b24fad6ed32de7b48b08a16632411 /meta/recipes-extended/bash/bash_4.3.bb | |
| parent | 73aff6efb3374427234a3615ffca07874f22f3fa (diff) | |
| download | openembedded-core-6c51cc96d03df26d1c10867633e7a10dfbec7c45.tar.gz | |
bash: Fix for exported function namespace change
This is a followup patch to incomplete CVE-2014-6271 fix code execution via
specially-crafted environment
This patch changes the encoding bash uses for exported functions to avoid
clashes with shell variables and to avoid depending only on an environment
variable's contents to determine whether or not to interpret it as a shell
function.
Signed-off-by: Sona Sarmadi <sona.sarmadi@enea.com>
Diffstat (limited to 'meta/recipes-extended/bash/bash_4.3.bb')
| -rw-r--r-- | meta/recipes-extended/bash/bash_4.3.bb | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/meta/recipes-extended/bash/bash_4.3.bb b/meta/recipes-extended/bash/bash_4.3.bb index 69ddeccd35..1130c751be 100644 --- a/meta/recipes-extended/bash/bash_4.3.bb +++ b/meta/recipes-extended/bash/bash_4.3.bb @@ -11,6 +11,7 @@ SRC_URI = "${GNU_MIRROR}/bash/${BPN}-${PV}.tar.gz;name=tarball \ file://test-output.patch \ file://cve-2014-6271.patch;striplevel=0 \ file://cve-2014-7169.patch \ + file://Fix-for-bash-exported-function-namespace-change.patch \ file://run-ptest \ " |