From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A392613838B for ; Thu, 25 Sep 2014 14:02:38 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 1D611E0AB8; Thu, 25 Sep 2014 14:02:33 +0000 (UTC) Received: from mail0200.smtp25.com (mail0200.smtp25.com [174.37.170.200]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 5BD22E0AB2 for ; Thu, 25 Sep 2014 14:02:29 +0000 (UTC) Received: from ccs.covici.com (s-out-001.smtp25.com [67.228.91.90]) by s-out-001.smtp25.com (8.14.2/8.14.2) with ESMTP id s8PE2RQd003770 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL) for ; Thu, 25 Sep 2014 10:02:28 -0400 Received: from ccs.covici.com (localhost [127.0.0.1]) by ccs.covici.com (8.14.9/8.14.8) with ESMTP id s8PE2Rcg012692 for ; Thu, 25 Sep 2014 10:02:27 -0400 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] [Security] Update bash *NOW* In-reply-to: <54241072.6090004@fastmail.co.uk> References: <20140925015844.GA21952@waltdnes.org> <54241072.6090004@fastmail.co.uk> Comments: In-reply-to Kerin Millar message dated "Thu, 25 Sep 2014 13:54:10 +0100." X-Mailer: MH-E 8.2; nmh 1.3; GNU Emacs 23.4.1 Date: Thu, 25 Sep 2014 10:02:27 -0400 Message-ID: <12691.1411653747@ccs.covici.com> From: covici@ccs.covici.com X-SpamH-OriginatingIP: 70.109.53.110 X-SpamH-Filter: s-out-001.smtp25.com-s8PE2RQd003770 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org X-Archives-Salt: b50ae369-415b-4077-9414-dc704f4b50e3 X-Archives-Hash: ba5702bd716bcbd84aae51f9d7f4a528 Kerin Millar wrote: > On 25/09/2014 02:58, Walter Dnes wrote: > > [snip] > > > ...with malicious stuff, and it could get ugly. app-shells/bash-4.2_p48 > > has been pushed to Gentoo stable. The same "env" command results in... > > Unfortunately, that version did fully address the problem. Instead, > upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were > recently committed. For further details: > > https://bugs.gentoo.org/show_bug.cgi?id=523592 I cannot update to that, its not in the tree as of last night. -- Your life is like a penny. You're going to lose it. The question is: How do you spend it? John Covici covici@ccs.covici.com