From fc37a44a011d63fab394e0cbca2a0494b4d5721b Mon Sep 17 00:00:00 2001 From: Mark Hatle Date: Mon, 6 Oct 2014 09:44:54 -0500 Subject: bash: update and CVE-2014-6278 fix Update both bash 3.2.48 (to 57), and bash 4.3 (to 30) to fix the remaining 'shellshock' security issues, CVE-2014-6278. (From OE-Core rev: a2709547644ae417fbd5435e1372068c7cd5db4c) Signed-off-by: Mark Hatle Signed-off-by: Richard Purdie --- meta/recipes-extended/bash/bash_3.2.48.bb | 3 +++ 1 file changed, 3 insertions(+) (limited to 'meta/recipes-extended/bash/bash_3.2.48.bb') diff --git a/meta/recipes-extended/bash/bash_3.2.48.bb b/meta/recipes-extended/bash/bash_3.2.48.bb index 77f251409e..35e624bb8b 100644 --- a/meta/recipes-extended/bash/bash_3.2.48.bb +++ b/meta/recipes-extended/bash/bash_3.2.48.bb @@ -14,6 +14,7 @@ SRC_URI = "${GNU_MIRROR}/bash/bash-${PV}.tar.gz;name=tarball \ ${GNU_MIRROR}/bash/bash-3.2-patches/bash32-054;apply=yes;striplevel=0;name=patch054 \ ${GNU_MIRROR}/bash/bash-3.2-patches/bash32-055;apply=yes;striplevel=0;name=patch055 \ ${GNU_MIRROR}/bash/bash-3.2-patches/bash32-056;apply=yes;striplevel=0;name=patch056 \ + ${GNU_MIRROR}/bash/bash-3.2-patches/bash32-057;apply=yes;striplevel=0;name=patch057 \ file://mkbuiltins_have_stringize.patch \ file://build-tests.patch \ file://test-output.patch \ @@ -38,3 +39,5 @@ SRC_URI[patch055.md5sum] = "05d201176d3499e2dfa4a73d09d42f05" SRC_URI[patch055.sha256sum] = "c0e816700837942ed548da74e5917f74b70cbbbb10c9f2caf73e8e06a0713d0a" SRC_URI[patch056.md5sum] = "222eaa3a2c26f54a15aa5e08817a534a" SRC_URI[patch056.sha256sum] = "063a8d8d74e4407bf07a32b965b8ef6d213a66abdb6af26cc3584a437a56bbb4" +SRC_URI[patch057.md5sum] = "47d98e3e042892495c5efe54ec6e5913" +SRC_URI[patch057.sha256sum] = "5fc689394d515990f5ea74e2df765fc6e5e42ca44b4591b2c6f9be4b0cadf0f0" -- cgit v1.2.3-54-g00ecf