Changeset 2619 for trunk/server

Timestamp:

Sep 24, 2014, 9:13:05 PM (10 years ago)

Author:

andersk

Message:

bash: Disable function imports

The upstream fix for CVE-2014-6271 isn’t good enough.  Furthermore,
even if they were completely fixed to operate as intended, they are
still a bad idea to begin with.  Disable this feature entirely.

Location:

trunk/server

Files:

• common/patches/bash-4.2-disable-function-imports.patch (added)
• fedora/Makefile (modified) (1 diff)
• fedora/specs/bash.spec.patch (added)
• fedora/specs/scripts-base.spec (modified) (1 diff)

trunk/server/fedora/Makefile

@@ -19 +19 @@
 # See /COPYRIGHT in this repository for more information.
 
-upstream_yum    = krb5 krb5.i686 httpd openssh libgsasl
+upstream_yum    = krb5 krb5.i686 httpd openssh libgsasl bash
 hackage         = cgi-3001.1.8.5 unix-handle-0.0.0
 upstream_hackage = ghc-cgi ghc-unix-handle

trunk/server/fedora/specs/scripts-base.spec

@@ -12 +12 @@
 Requires: accountadm
 Requires: execsys
+Requires: scripts-bash
 Requires: scripts-dkms-openafs
 Requires: %{all_archs scripts-krb5-libs}