[Lunar-commits] <moonbase-core> bash, bash_static: [SECURITY FIX] CVE-2014-6271

[Stefan Wold]

commit 8d38bcaeaf9a3d720f09278c4a0d072f2313e7ed
Author: Stefan Wold <ratler at lunar-linux.org>
Date: Wed, 24 Sep 2014 19:47:15 +0200
URL: https://github.com/lunar-linux/moonbase-core/commit/8d38bcaeaf9a3d720f09278c4a0d072f2313e7ed

bash, bash_static: [SECURITY FIX] CVE-2014-6271
---
  shells/bash/DETAILS          | +4/-2     
  shells/bash/PRE_BUILD        | +2/-0     
  shells/bash_static/DETAILS   | +4/-2     
  shells/bash_static/PRE_BUILD | +2/-0     
  4 files changed, 12 insertions(+), 4 deletions(-)

--- a/shells/bash/DETAILS
+++ b/shells/bash/DETAILS
@@ -1,15 +1,17 @@
           MODULE=bash
          VERSION=4.3
           SOURCE=$MODULE-$VERSION.tar.gz
+         SOURCE2=bash43-patches-001-025.patch
    SOURCE_URL[0]=$GNU_URL/$MODULE
    SOURCE_URL[1]=ftp://ftp.gnu.org/pub/gnu/$MODULE
    SOURCE_URL[2]=ftp://ftp.cwru.edu/pub/$MODULE
+     SOURCE2_URL=$PATCH_URL
       SOURCE_VFY=sha1:45ac3c5727e7262334f4dfadecdf601b39434e84
+     SOURCE2_VFY=sha256:b44ed93696f544e01de2a427acb51130bbe389588d07908e69681f16fed0afc1
         WEB_SITE=http://www.gnu.org/software/bash
          ENTERED=20010922
-         UPDATED=20140323
+         UPDATED=20140924
            SHORT="A shell of the GNU operating system"
-PSAFE=no
 
 cat << EOF
 bash - Shell of the GNU operating system. Bash is an sh-compatible
--- /dev/null
+++ b/shells/bash/PRE_BUILD
@@ -0,0 +1,2 @@
+default_pre_build &&
+patch_it $SOURCE2 0
--- a/shells/bash_static/DETAILS
+++ b/shells/bash_static/DETAILS
@@ -1,14 +1,16 @@
           MODULE=bash_static
          VERSION=4.3
           SOURCE=bash-$VERSION.tar.gz
+         SOURCE2=bash43-patches-001-025.patch
 SOURCE_DIRECTORY=$BUILD_DIRECTORY/bash-$VERSION
    SOURCE_URL[0]=$GNU_URL/$MODULE
    SOURCE_URL[1]=ftp://ftp.gnu.org/pub/gnu/$MODULE
    SOURCE_URL[2]=ftp://ftp.cwru.edu/pub/$MODULE
       SOURCE_VFY=sha1:45ac3c5727e7262334f4dfadecdf601b39434e84
-        WEB_SITE=http://tiswww.case.edu/php/chet/bash_static/bashtop.html
+     SOURCE2_VFY=sha256:b44ed93696f544e01de2a427acb51130bbe389588d07908e69681f16fed0afc1
+        WEB_SITE=http://www.gnu.org/software/bash
          ENTERED=20020615
-         UPDATED=20140323
+         UPDATED=20140924
            SHORT="static bash build for rescue purposes"
 
 cat << EOF
--- /dev/null
+++ b/shells/bash_static/PRE_BUILD
@@ -0,0 +1,2 @@
+default_pre_build &&
+patch_it $SOURCE2 0