Security Advisory - bash - Recent bash CVE patches need to be backported to Dora (YP 1.5.4)
Robert's patches got merged to the dora branch, but the bash version 4.2 recipe did not get patched (only 3.2.48). I have sent patches to fix this which are currently under review.
merged to dora: http://git.openembedded.org/openembedded-core/commit/?h=dora&id=05eecceb4d2a5821cd0ca0164610e9e6d68bb22c http://git.openembedded.org/openembedded-core/commit/?h=dora&id=1c8f43767c7d78872d38652ea808f30ea825bbef http://git.openembedded.org/openembedded-core/commit/?h=dora&id=74d45affd5cda2e388d42db3322b4a0d5aff07e8 http://git.openembedded.org/openembedded-core/commit/?h=dora&id=a71680ec6e12c17159336dc34d904cb70155d0d7