From b457509f0e164f1ce50c76c1e0855c37ad682f10 Mon Sep 17 00:00:00 2001 From: Ido Rosen Date: Thu, 25 Sep 2014 11:44:47 -0400 Subject: [PATCH] Update README.md --- README.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 2769c65..acf2c80 100644 --- a/README.md +++ b/README.md @@ -10,10 +10,9 @@ http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-6271 Note that this does (yet) not fix the follow-up CVE-2014-7169 vulnerability, see: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-7169 -I am waiting for the proposed patch for CVE-2014-7169 as well by the maintainer of Bash (Chet Ramsey) to pass code review. That patch is currently located here: +I am waiting for the proposed patch for CVE-2014-7169 as well by the maintainer of Bash (Chet Ramsey) to pass review. That patch is currently located here: http://www.openwall.com/lists/oss-security/2014/09/25/10 - So far, all this does is apply the 3.2.52 patch to bash-92 from Apple. I will update this repository when a fix for CVE-2014-7169 is released as well, pull requests are welcome. Hopefully Apple releases an official patch and this repository becomes irrelevant soon. @@ -35,7 +34,9 @@ Usage You should see the following output: - GNU bash, version 3.2.52(1)-release (x86_64-apple-darwin13) +``` +GNU bash, version 3.2.52(1)-release (x86_64-apple-darwin13) +``` Don't trust me? ===============