From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) by finch.gentoo.org (Postfix) with ESMTP id A157813838B for ; Thu, 25 Sep 2014 14:10:18 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 8D782E0AA8; Thu, 25 Sep 2014 14:10:07 +0000 (UTC) Received: from mailgw.shmu.sk (mailgw.shmu.sk [91.199.31.35]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 35F42E0AA2 for ; Thu, 25 Sep 2014 14:10:05 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mailgw.shmu.sk (Postfix) with ESMTP id 777F62F065; Thu, 25 Sep 2014 14:10:03 +0000 (UTC) X-Virus-Scanned: amavisd-new at shmu.sk Received: from mailgw.shmu.sk ([127.0.0.1]) by localhost (mailgw.shmu.sk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ajlUVYtsvqWy; Thu, 25 Sep 2014 14:09:58 +0000 (UTC) Received: from srv-mail-relay.kol.shmu.sk (srv-mail-ng.kol.shmu.sk [10.20.8.23]) by mailgw.shmu.sk (Postfix) with ESMTP id 815584A022; Thu, 25 Sep 2014 14:09:58 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by srv-mail-relay.kol.shmu.sk (Postfix) with ESMTP id 7CF3525003; Thu, 25 Sep 2014 16:09:58 +0200 (CEST) X-Virus-Scanned: amavisd-new at shmu.sk Received: from srv-mail.kol.shmu.sk ([127.0.0.1]) by localhost (srv-mail.shmu.sk [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id aWM41mYEbeRE; Thu, 25 Sep 2014 16:09:58 +0200 (CEST) Received: from mail.shmu.sk (localhost [127.0.0.1]) by srv-mail.kol.shmu.sk (Postfix) with ESMTP id 547F2220FA; Thu, 25 Sep 2014 16:09:58 +0200 (CEST) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit Date: Thu, 25 Sep 2014 16:09:58 +0200 From: Tomas Mozes To: gentoo-user@lists.gentoo.org Cc: covici@ccs.covici.com Subject: Re: [gentoo-user] [Security] Update bash *NOW* In-Reply-To: <12691.1411653747@ccs.covici.com> References: <20140925015844.GA21952@waltdnes.org> <54241072.6090004@fastmail.co.uk> <12691.1411653747@ccs.covici.com> Message-ID: X-Sender: tomas.mozes@shmu.sk User-Agent: webmail-ng X-Archives-Salt: 73b80390-2273-4cd6-b2ed-88d27cd05b14 X-Archives-Hash: dbae045ea0a49fbb1820901bf111726d On 2014-09-25 16:02, covici@ccs.covici.com wrote: > Kerin Millar wrote: > >> On 25/09/2014 02:58, Walter Dnes wrote: >> >> [snip] >> >> > ...with malicious stuff, and it could get ugly. app-shells/bash-4.2_p48 >> > has been pushed to Gentoo stable. The same "env" command results in... >> >> Unfortunately, that version did fully address the problem. Instead, >> upgrade to 4.2_p48-r1 or any of the -r1 revision bumps that were >> recently committed. For further details: >> >> https://bugs.gentoo.org/show_bug.cgi?id=523592 > I cannot update to that, its not in the tree as of last night. Try to rsync from some other mirror.