From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id B336B13838B for ; Thu, 25 Sep 2014 12:54:22 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DC6EDE0A4F; Thu, 25 Sep 2014 12:54:16 +0000 (UTC) Received: from out3-smtp.messagingengine.com (out3-smtp.messagingengine.com [66.111.4.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id AAB97E08E5 for ; Thu, 25 Sep 2014 12:54:15 +0000 (UTC) Received: from compute5.internal (compute5.nyi.internal [10.202.2.45]) by gateway2.nyi.internal (Postfix) with ESMTP id 2EBCD20960 for ; Thu, 25 Sep 2014 08:54:15 -0400 (EDT) Received: from frontend1 ([10.202.2.160]) by compute5.internal (MEProxy); Thu, 25 Sep 2014 08:54:15 -0400 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=fastmail.co.uk; h= x-sasl-enc:message-id:date:from:mime-version:to:subject :references:in-reply-to:content-type:content-transfer-encoding; s=mesmtp; bh=LW1MqQ7RCDfkfgp5MPKvmn0p5r4=; b=URP+K3YwEHu08JQENS BKUWCZGtL68kG3cQdDLvmkVkL3IBNxZp/r9jSLTAfUPkJzPYSEMIQtFmoZZ1QnT6 AUFDJXRzgjugYLCYndknShbZXIV/sFArX0vjWuVQYRZdA8CMBDxb6TBsB5NBSE55 GvsLOG5h5o0v83DXq77SGmPm8= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d= messagingengine.com; h=x-sasl-enc:message-id:date:from :mime-version:to:subject:references:in-reply-to:content-type :content-transfer-encoding; s=smtpout; bh=LW1MqQ7RCDfkfgp5MPKvmn 0p5r4=; b=czwqE5eKzQTJJevadQJo7E5Awr+lcn6zeTXi6fxqR0pW4mbVnuF79k m46j9l6LzF9D9HWVPx08r8GSgUOIvn5iZbbaQ6Lkaxpe0FexMA/HN1hPz00eX/Lc 23/SrY8ulkCcwNlcFXeRqis1SMdlXERf/yqhnPK0p9gXZYHf7g3ws= X-Sasl-enc: 36/5EGdx4dq8ywhJnH0GO4KuOEeNCuA0GKKbOen9ZKSv 1411649654 Received: from [192.168.1.130] (unknown [77.101.146.254]) by mail.messagingengine.com (Postfix) with ESMTPA id D15FAC008FC for ; Thu, 25 Sep 2014 08:54:14 -0400 (EDT) Message-ID: <54241072.6090004@fastmail.co.uk> Date: Thu, 25 Sep 2014 13:54:10 +0100 From: Kerin Millar User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:24.0) Gecko/20140731 FossaMail/24.7.0 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] [Security] Update bash *NOW* References: <20140925015844.GA21952@waltdnes.org> In-Reply-To: <20140925015844.GA21952@waltdnes.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Archives-Salt: 96461fe5-2dcc-4c75-92cd-03df79313711 X-Archives-Hash: 629390e3f1055104f6239f6a484e365d On 25/09/2014 02:58, Walter Dnes wrote: [snip] > ...with malicious stuff, and it could get ugly. app-shells/bash-4.2_p48 > has been pushed to Gentoo stable. The same "env" command results in... Unfortunately, that version did fully address the problem. Instead, upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were recently committed. For further details: https://bugs.gentoo.org/show_bug.cgi?id=523592 --Kerin