DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:date:message-id:subject:from:to
	:content-type; q=dns; s=default; b=vmJERyEj06SOen7LpJtpGt4Zz0U5H
	t7dtJkxvB/Grg2L8GM2q27SEYXmLxStp6ELWRdeSDyYLLO5L64jHmYUPtKOzcQZ/
	TE9Qy00E3MPrK0UFlWkmnHvnLlXNf6KjjHtnBafkzAr2JK/sp6xTobeG6BHovxj1
	ZCzcLbZMS4rwbY=
Mailing-List: contact cygwin-help@cygwin.com; run by ezmlm
Sender: cygwin-owner@cygwin.com
Mail-Followup-To: cygwin@cygwin.com
MIME-Version: 1.0
Date: Wed, 24 Sep 2014 14:12:28 -0400
Message-ID: <CAKs0fxFNsOnxf8PbZ3XQTLo_0-Qe7dyfLXE8wGfp=f6KyTjs4w@mail.gmail.com>
Subject: New bash vulnerability.
From: David Young <david.a.young@gmail.com>
To: cygwin@cygwin.com
Content-Type: text/plain; charset=UTF-8

Hi,

I've been seeing some traffic on this new bash vulnerability and
wanted to know if cygwin team will be updating bash with these
patches.

http://lists.gnu.org/archive/html/bug-bash/2014-09/index.html

Alternatively, is there a build guide that I can use to compile
bash-src with this patch myself?  After extracting the cygwin bash-src
package, I'm unclear as to how to move forward with these src.patch
cygwin.patch files and also what tools are necessary to build.  I'm
interested in 3.2.51(now 52 with the patch).


Thanks.

-- 
David Young

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple