Overview

Request 251817 accepted

- Add bash-4.2-CVE-2014-6271.patch
to fix CVE-2014-6271, the unexpected code execution with
environment variables (bnc#896776)

- Add patch bash-4.2-error-getpwd.patch
which is the backport of the corrected german error message for
a failing getpwd (bnc#895475)

- Add bash upstream patch 47 to fix a problem where the function
that shortens pathnames for $PS1 according to the value of
$PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
of memory, when it should use memmove. The result is garbled
pathnames in prompt strings.

- Add bash upstream patch 46 to fix a problem introduced by patch
32 a problem with "$@" and arrays expanding empty positional
parameters or array elements when using substring expansion,
pattern substitution, or case modfication. The empty parameters
or array elements are removed instead of expanding to empty
strings ("").
- Add readline upstream patch 5: The readline shared library
helper script needs to be updated for Mac OS X 10.9

- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
Even if used only by developers to debug readline library do not
open temporary files from public location without O_EXCL

Request History
Dr. Werner Fink's avatar

WernerFink created request

- Add bash-4.2-CVE-2014-6271.patch
to fix CVE-2014-6271, the unexpected code execution with
environment variables (bnc#896776)

- Add patch bash-4.2-error-getpwd.patch
which is the backport of the corrected german error message for
a failing getpwd (bnc#895475)

- Add bash upstream patch 47 to fix a problem where the function
that shortens pathnames for $PS1 according to the value of
$PROMPT_DIRTRIM uses memcpy on potentially-overlapping regions
of memory, when it should use memmove. The result is garbled
pathnames in prompt strings.

- Add bash upstream patch 46 to fix a problem introduced by patch
32 a problem with "$@" and arrays expanding empty positional
parameters or array elements when using substring expansion,
pattern substitution, or case modfication. The empty parameters
or array elements are removed instead of expanding to empty
strings ("").
- Add readline upstream patch 5: The readline shared library
helper script needs to be updated for Mac OS X 10.9

- CVE-2014-2524: bash,readline: temporary file misuse in _rl_tropen (bnc#868822)
Even if used only by developers to debug readline library do not
open temporary files from public location without O_EXCL


Marcus Meissner's avatar

msmeissn accepted request

ok

openSUSE Build Service is sponsored by