Re: Bash security issue

[Shawn H Corey]

On Thu, 25 Sep 2014 08:55:45 -0600
Eric Blake <address@hidden> wrote:

> On 09/25/2014 07:51 AM, Bob Friesenhahn wrote:
> > It may be that some users of 'autoconf' will be at risk due to the
> > dire bash security bug described at
> > "http://www.theregister.co.uk/2014/09/24/bash_shell_vuln/";.
> > 
> > Take care that the environment is carefully vetted.
> 
> There's nothing that ./configure can do to avoid the buggy bash, but
> it may indeed be worth patching autoconf to generate configure
> scripts that issue a loud warning if the buggy shell is detected on
> the user's system.  I'll look into doing that.
> 

You may be premature. I think the patch will be out before Monday. If
so, your effort will be wasted. :)


-- 
Don't stop where the ink does.
        Shawn