Date: Thu, 25 Sep 2014 14:44:48 -0500 From: Bryan Drewery <bdrewery@FreeBSD.org> To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: Re: svn commit: r369261 - in head/shells/bash: . files Message-ID: <542470B0.70105@FreeBSD.org> In-Reply-To: <201409251538.s8PFcvVX037226@svn.freebsd.org> References: <201409251538.s8PFcvVX037226@svn.freebsd.org>
next in thread | previous in thread | raw e-mail | index | archive | help
This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --OIFtTFkHBwaH4WIdW8esgHXEgiiLxakAA Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 9/25/2014 10:38 AM, Bryan Drewery wrote: > Author: bdrewery > Date: Thu Sep 25 15:38:56 2014 > New Revision: 369261 > URL: http://svnweb.freebsd.org/changeset/ports/369261 > QAT: https://qat.redports.org/buildarchive/r369261/ >=20 > Log: > Fix CVE-2014-3659. The original fix in 25 was not enough. FYI this issue was reassigned to CVE-2014-7169. > =20 > Obtained from: http://seclists.org/oss-sec/2014/q3/690 (bash develope= r) > Security: CVE-2014-3659 >=20 > Added: > head/shells/bash/files/patch-parse.y (contents, props changed) > Modified: > head/shells/bash/Makefile >=20 > Modified: head/shells/bash/Makefile > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > --- head/shells/bash/Makefile Thu Sep 25 15:18:27 2014 (r369260) > +++ head/shells/bash/Makefile Thu Sep 25 15:38:56 2014 (r369261) > @@ -4,7 +4,7 @@ > PORTNAME=3D bash > PATCHLEVEL=3D 25 > PORTVERSION=3D 4.3.${PATCHLEVEL:S/^0//g} > -PORTREVISION?=3D 0 > +PORTREVISION?=3D 1 > CATEGORIES=3D shells > MASTER_SITES=3D GNU > MASTER_SITE_SUBDIR=3D ${PORTNAME} > @@ -64,6 +64,9 @@ CONFLICTS+=3D bash-static-[0-9]* > .endif > =20 > post-patch: > +# Ensure y.tab.c is regenerated > + ${TOUCH} ${WRKSRC}/parse.y > + ${RM} ${WRKSRC}/y.tab.c > @${REINPLACE_CMD} -e "s|%%PREFIX%%|${PREFIX}|g" ${WRKSRC}/doc/bash.1 > .if ${PORT_OPTIONS:MSYSLOG} > @${REINPLACE_CMD} \ >=20 > Added: head/shells/bash/files/patch-parse.y > =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D > --- /dev/null 00:00:00 1970 (empty, because file is newly added) > +++ head/shells/bash/files/patch-parse.y Thu Sep 25 15:38:56 2014 (r369= 261) > @@ -0,0 +1,13 @@ > +http://seclists.org/oss-sec/2014/q3/690 > + > +*** ../bash-20140912/parse.y 2014-08-26 15:09:42.000000000 -0400 > +--- parse.y 2014-09-24 22:47:28.000000000 -0400 > +*************** > +*** 2959,2962 **** > +--- 2959,2964 ---- > + word_desc_to_read =3D (WORD_DESC *)NULL; > + =20 > ++ eol_ungetc_lookahead =3D 0; > ++=20 > + current_token =3D '\n'; /* XXX */ > + last_read_token =3D '\n'; >=20 --=20 Regards, Bryan Drewery --OIFtTFkHBwaH4WIdW8esgHXEgiiLxakAA Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (MingW32) iQEcBAEBAgAGBQJUJHCwAAoJEDXXcbtuRpfP7YYIAJKqY9Gu0M2q7ajsD/yz+g3o I9xt7nrSRFQshEZyLtufRXSQBRnZ8ncpKSWv1H7a6meV+GNFRxvVU5U8507NohIE 7R02oModLuanXq+8/vPcTjWPDNNXnDf9HP+nol3st+4ljzTzwANxyurJYXilpqF5 NfgsvXo5PpHpWEZH2aG+W9PT80SK6lh9r1ZS0KO15QTjkk7zQFgxiJKVu5SzZSMc ZmbKGn6wbvdtdC1gJBGEPzi+gFXfIS/4tkE/Da/f70RVrbcPydEYY4ZAy6fjweRe bJvm1RFqbhqZWOmjUGKbhORRg0TFfypz0RVNdV2nzsVWvclFRpudWXm2vpZCS/w= =adA1 -----END PGP SIGNATURE----- --OIFtTFkHBwaH4WIdW8esgHXEgiiLxakAA--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?542470B0.70105>