Bug 6779

Summary: Get Bash CVE Patches backported to Dora
Product: [Build System, Metadata & Runtime] OE-Core Reporter: Stephen K Jolley <sjolley.yp.pm>
Component: coreAssignee: Robert Yang <liezhi.yang>
Status: RESOLVED FIXED QA Contact:
Severity: critical    
Priority: High CC: bluelightning, meta.mr.watcher, meta.watcher, sjolley.yp.pm
Version: 1.5.4   
Target Milestone: 1.5.4   
Hardware: All   
OS: Multiple   
Whiteboard:
OS type for building Yocto: --- Type of Regression: ---
Verified: Documentation change: No (bug/feature does not impact docs)

Description Stephen K Jolley 2014-09-30 20:05:47 UTC
Security Advisory - bash - Recent bash CVE patches need to be backported to Dora (YP 1.5.4)
Comment 1 Paul Eggleton 2014-10-02 14:49:53 UTC
Robert's patches got merged to the dora branch, but the bash version 4.2 recipe did not get patched (only 3.2.48). I have sent patches to fix this which are currently under review.