[OpenIndiana-discuss] Bash bug issue

[Alexander Pyhalov]

On 09/25/2014 15:08, Carl Brewer wrote:
> On 25/09/2014 6:50 PM, Alexander Pyhalov wrote:
>> On 09/25/2014 12:46, Udo Grabowski (IMK) wrote:
>>> On 25/09/2014 10:42, Jonathan Adams wrote:
>>>> http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/
>>>>
>>> The bug "works", so we are affected with everything that
>>> is based on bash, as well as all users using bash in their
>>> projects.
>>> This is a bug with high impact and risks, so a fix should be
>>> available for oi dev and hipster as fast as possible.
>>
>> Hello.
>> I've seen fix for CVE-2014-6271, which I've already committed, but not
>> for CVE-2014-7169...
>>
>
> I'm stuck on 151a8 at the moment, is there any chance a fixed bash
> binary could be made available somewhere?

Binary will likely not work, because it was compiled with later libc 
version. But you can try compile it yourself (you can look at using 
oi-userland on /dev - https://github.com/OpenIndiana/oi-userland, it can 
work with some tweaks to configs).


-- 
С уважением,
Александр Пыхалов,
программист отдела телекоммуникационной инфраструктуры
управления информационно-коммуникационной инфраструктуры ЮФУ