Update bash to patch release 20 #254
Conversation
Signed-off-by: Thomas Braun <[email protected]>
Downloaded from http://sourceforge.net/projects/mingw/files/MSYS/Extension/bison/bison-2.4.1-1/bison-2.4.1-1-msys-1.0.11-bin.tar.lzma/download and extracted. Signed-off-by: Thomas Braun <[email protected]>
Signed-off-by: Thomas Braun <[email protected]>
Signed-off-by: Thomas Braun <[email protected]>
Bring bash from patchlevel 0 to patchlevel 20. This update fixes the following security bugs: - CVE-2014-6271 - CVE-2014-7169 - CVE-2014-7186 - CVE-2014-7187 Signed-off-by: Thomas Braun <[email protected]>
|
Btw. I expect that more bash bugs will surface in the next days/weeks. So I'll guess I'll have to do a new release quite soon again. |
|
Except the usual and minor svn test breakages, all other git tests pass with the new bash. |
|
@t-b if you feel that we need to release a new Bash, sure, let's go with your PR. You spent waaaay more time than I would have to fix something I had the impression only affects setups running servers (and Git for Windows does not really do that). So you definitely deserve a reward! ;-) |
|
@dscho Well it was also a good occasion to get the other bash fixes. Thanks for merging. |
|
@t-b Me and the rest of the GitHub for Windows team are most grateful for your work on this ✨ Can I hook you up with some stickers as a small way of saying thanks? |
|
@niik Thanks! I'd love to have some stickers. You should have my email if you read git or msysgit mailing list, no? I don't like posting my post address here ;) |
|
@t-b Awesome, just send me your postal address to my email and I'll send some. My address is my username at the very domain you're reading this on! |
|
@niik Sent! |
3 participants
I just felt like updating bash. Not because some heavy security bugs have been found ;)
As already stated in the info mail on the msysgit mailing list, I've included, against our rules, some binary files to compile bash.
But as msysgit is basically EOL, I hope this is okay.
Once this is merged I'll cherry-pick 895e4dd to msysgit/master on my own. Okay?