diff options
| author | Ross Burton <ross.burton@intel.com> | 2014-09-26 00:05:18 +0100 |
|---|---|---|
| committer | Richard Purdie <richard.purdie@linuxfoundation.org> | 2014-10-02 12:48:10 +0100 |
| commit | 3bde5804e329b582739414caf2c1534b6ab1ee3d (patch) | |
| tree | 6e7522a79cf0bd63457945aa1b14078e225ea652 /meta-skeleton | |
| parent | c084a21b1ae0d954e475f702bb36f045af285b0b (diff) | |
| download | poky-3bde5804e329b582739414caf2c1534b6ab1ee3d.tar.gz | |
bash: fix CVE-2014-6271
CVE-2014-6271 aka ShellShock.
"GNU Bash through 4.3 processes trailing strings after function definitions in
the values of environment variables, which allows remote attackers to execute
arbitrary code via a crafted environment."
(From OE-Core master rev: 798d833c9d4bd9ab287fa86b85b4d5f128170ed3)
(From OE-Core rev: 05eecceb4d2a5821cd0ca0164610e9e6d68bb22c)
Signed-off-by: Ross Burton <ross.burton@intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta-skeleton')
0 files changed, 0 insertions, 0 deletions