[PATCH 0/2] Add graft for Bash CVE-2017-5932

[Ludovic Courtès]

Hello!

This patch fixes Bash CVE-2017-5932, which is a remote code execution
vulnerability triggered by file name completion and disclosed on Wednesday:

  
https://github.com/jheyens/bash_completion_vuln/raw/master/2017-01-17.bash_completion_report.pdf
  http://www.openwall.com/lists/oss-security/2017/02/07/9

I'll apply it today if there are no objections.

Thanks in advance,
Ludo'.

Ludovic Courtès (2):
  gnu: bash: Update patch URL to 4.4.
  gnu: bash: Add graft for patch #7 [fixes CVE-2017-5932].

 gnu/packages/bash.scm | 46 ++++++++++++++++++++++++++++++++++++++++++++--
 1 file changed, 44 insertions(+), 2 deletions(-)

-- 
2.11.0