|
Hi All,
I've been checking http://ftp.gnu.org/gnu/bash/ and as of now on 9/26, it looks like there's still no official bash patch that addresses CVE-2014-7169.
So I've decided to try testing the unofficial bash patch that's available:
http://seclists.org/oss-sec/2014/q3/734
Using this as a guide:
http://alblue.bandlem.com/2014/09/bash-remote-vulnerability.html
My question is, if I'm trying to patch a Lion (10.7.5) system to bash 3.2.53, does anyone foresee a problem with using Apple's latest "bash-92" release (bash 3.2.51(1)) as the basis for patching?
I only ask because Apple's "official" bash release on Lion was "bash-84" (bash 3.2.48(1)).
https://opensource.apple.com/release/os-x-1094/
https://opensource.apple.com/release/mac-os-x-1075/
It's hard to imagine there'd be a problem, but just thought I'd ask.
Thanks,
Kevin
|