Zhixiong Chi a5dfa90ea8 bash: CVE-2016-0634 ...

A vulnerability was found in a way bash expands the $HOSTNAME.
Injecting the hostname with malicious code would cause it to run
each time bash expanded \h in the prompt string.

Porting patch from <https://ftp.gnu.org/gnu/bash/bash-4.3-patches/
bash43-047> to solve CVE-2016-0634

CVE: CVE-2016-0634

(From OE-Core rev: 7dd6aa1a4bf6e9fc8a1998cda6ac5397bb5cd5cb)

(From OE-Core rev: a4b37b05140b549960baef49237ce3316e84a041)

(From OE-Core rev: a75c9657f785be3b2d14b10a7044105329c88e8a)

Signed-off-by: Zhixiong Chi <zhixiong.chi@windriver.com>
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Armin Kuster <akuster808@gmail.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2017-08-29 16:50:53 +01:00

..

bash

bash: fix CVE-2016-9401

2017-05-18 13:07:32 +01:00

bash-3.2.57

bash_3.2.x: update recipe version to match what we're shipping

2016-11-16 10:37:57 +00:00

bash_3.2.57.bb

bash_3.2.x: update recipe version to match what we're shipping

2016-11-16 10:37:57 +00:00

bash_4.3.30.bb

bash: CVE-2016-0634

2017-08-29 16:50:53 +01:00

bash.inc

bash: fix dependencies and QA Issue

2016-05-06 10:31:15 +01:00