[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Shellshock-vulnerable version still most obvious on ftp.gnu.org

From: Chet Ramey
Subject: Re: Shellshock-vulnerable version still most obvious on ftp.gnu.org
Date: Wed, 05 Nov 2014 10:13:25 -0500
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:24.0) Gecko/20100101 Thunderbird/24.6.0

On 11/5/14, 7:35 AM, Ian Jackson wrote:
> If you go to ftp://ftp.gnu.org/pub/gnu/bash/, the most obvious most
> recent version of bash is this:
>   ftp://ftp.gnu.org/pub/gnu/bash/bash-4.3.tar.gz
>   ftp://ftp.gnu.org/pub/gnu/bash/bash-4.3.tar.gz.sig
> The shellshock fix is hidden in a subdirectory:
>   ftp://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/
> This is not mentioned on the main bash webpage here:
>   http://www.gnu.org/software/bash/
> Could there please be a new full tarball release of the patched
> version ?

This is from tiswww.case.edu/~chet/bash/bashtop.html:

A downloadable tar file of the current version with all official patches
applied is available from savannah.

(The link is to
http://git.savannah.gnu.org/cgit/bash.git/snapshot/bash-master.tar.gz).  I
cannot change the main bash webpage to include that

I will put tarballs with patches in the usual places within a few days.

``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, ITS, CWRU    chet@case.edu    http://cnswww.cns.cwru.edu/~chet/

reply via email to

[Prev in Thread] Current Thread [Next in Thread]