[MacPorts] #45150: bash 4.3.24_0 critical security update

MacPorts noreply at macports.org
Wed Sep 24 12:17:35 PDT 2014


#45150: bash 4.3.24_0 critical security update
-------------------------+----------------------
  Reporter:  hahn.seb@…  |      Owner:  raimue@…
      Type:  defect      |     Status:  closed
  Priority:  Normal      |  Milestone:
 Component:  ports       |    Version:
Resolution:  fixed       |   Keywords:  haspatch
      Port:  bash        |
-------------------------+----------------------

Comment (by johndouthat@…):

 My mistake! I was running the wrong version of bash. Sincerest apologies.

 {{{
 ~ heroku-1.8.7-p375 $ env x='() { :;}; echo vulnerable'
 /opt/local/bin/bash -c "echo this is a test"
 /opt/local/bin/bash: warning: x: ignoring function definition attempt
 /opt/local/bin/bash: error importing function definition for `x'
 this is a test
 }}}

-- 
Ticket URL: <https://trac.macports.org/ticket/45150#comment:5>
MacPorts <http://www.macports.org/>
Ports system for OS X


More information about the macports-tickets mailing list