bash velnerability

[Bryan Drewery]

On 9/26/2014 12:41 PM, Bryan Drewery wrote:
> On 9/26/2014 11:51 AM, Bryan Drewery wrote:
>> On 9/26/2014 11:46 AM, Bartek Rutkowski wrote:
>>> Apparently, the full fix is still not delivered, accordingly to this:
>>> http://seclists.org/oss-sec/2014/q3/741
>>>
>>> Kind regards,
>>> Bartek Rutkowski
>>>
>>
>> I'm pretty sure they call that a "feature". This is a bit different.

I've disabled environment function importing in the port. Using
--import-functions will allow it to work if you need it.

https://svnweb.freebsd.org/changeset/ports/369341

-- 
Regards,
Bryan Drewery

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-security/attachments/20140926/77d8db70/attachment.sig>