X-Original-To: alpine-aports@lists.alpinelinux.org Received: from mail-lf0-f52.google.com (mail-lf0-f52.google.com [209.85.215.52]) by lists.alpinelinux.org (Postfix) with ESMTP id 4BD575C41D5 for ; Tue, 24 Jan 2017 08:54:45 +0000 (GMT) Received: by mail-lf0-f52.google.com with SMTP id v186so107073612lfa.1 for ; Tue, 24 Jan 2017 00:54:45 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=opc6sV44z6bOCf4kx3zVgEa5anWlMeEzpuSYa16ThqY=; b=WGO2h0iJhXaSa/So6OE+Bgeh2qSb+BsfQALVXp4bcucVDJfZvZDzEi+smkCHIREPDW sgGc+7iUn1Mdx9GOFTRTTBCxsHazOhx/n0TR2mKC2E9PAGCuAMnySxxpsGCb25raIHcu xuOenXD1/+Yjfw0BCQwk0CW8fF3J+3CeMFqNqh3RBkG4FT/dB4X+GImajFKs+fCoROcm VD8tor41t2yZBKnM1aXK5SXAjbVDnikwIIBEozV+yoBDC6Ca+ZhM/FkvYYWdzN6J/cNP PJZpOQ4qyRnpaGMYlH+ReOETH0I84c8TAQXCetvlIFM65eTDHehihiwqGWfFOz1ZJdx7 Zozw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:mime-version :content-transfer-encoding; bh=opc6sV44z6bOCf4kx3zVgEa5anWlMeEzpuSYa16ThqY=; b=j/IlqEBDQXyB9gwkMWQYS8Rl6kz5dE24dcSWoi7AM6qjJxmlquIUldbOQdGBIESo6t WLI7/rRCpSVVTRAENhsLCUnCymOuhiS+kbIs7n4R/HHuZ3kDbuCSqPg039Uc29R5Wf3Q +vMmjZ9Ikqy/dI3+mv/yomrFWAtTZHIz3iF+I0KrGUZrTxwpeWASV7O7O6/yzmgkyn2C rf7EREB6+yhlgUE1Yes3tvSV8xbvO6U3SJaElx/ylYoZb7ew2IpMNVPuNz+OWadPhOYB z7U4ZwBKfEn3zR7uQZX+tiXjCtD1wbmMZo5KqFgL+jhMh89O5DpGe8Yh9rAuhNBDAzaq SMrA== X-Gm-Message-State: AIkVDXKypV8afk5vy7s238HvPfrkCQFxiXYQ8nPyM5qyCXD4zK6nHE6sDA1CsEEhaJU1Lg== X-Received: by 10.46.72.1 with SMTP id v1mr12890305lja.12.1485248084503; Tue, 24 Jan 2017 00:54:44 -0800 (PST) Received: from v3-5.util.wtbts.net ([83.145.235.199]) by smtp.gmail.com with ESMTPSA id t23sm7170109ljd.30.2017.01.24.00.54.43 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 24 Jan 2017 00:54:43 -0800 (PST) From: Sergei Lukin To: alpine-aports@lists.alpinelinux.org Cc: Sergei Lukin Subject: [alpine-aports] [PATCH v3.5] main/bash: security fixes #6655 Date: Tue, 24 Jan 2017 08:54:31 +0000 Message-Id: <20170124085431.16543-1-sergej.lukin@gmail.com> X-Mailer: git-send-email 2.11.0 X-Mailinglist: alpine-aports Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Q1ZFLTIwMTYtOTQwMQ0KLS0tDQogbWFpbi9iYXNoL0FQS0JVSUxEICAgICAgICAgICAgfCAxMiAr KysrKysrKysrKy0NCiBtYWluL2Jhc2gvQ1ZFLTIwMTYtOTQwMS5wYXRjaCB8IDI3ICsrKysrKysr KysrKysrKysrKysrKysrKysrKw0KIDIgZmlsZXMgY2hhbmdlZCwgMzggaW5zZXJ0aW9ucygrKSwg MSBkZWxldGlvbigtKQ0KIGNyZWF0ZSBtb2RlIDEwMDY0NCBtYWluL2Jhc2gvQ1ZFLTIwMTYtOTQw MS5wYXRjaA0KDQpkaWZmIC0tZ2l0IGEvbWFpbi9iYXNoL0FQS0JVSUxEIGIvbWFpbi9iYXNoL0FQ S0JVSUxEDQppbmRleCBmMDI3Yjc4NGRhLi40Nzg0Y2Y1YTg2IDEwMDY0NA0KLS0tIGEvbWFpbi9i YXNoL0FQS0JVSUxEDQorKysgYi9tYWluL2Jhc2gvQVBLQlVJTEQNCkBAIC0xLDMgKzEsNCBAQA0K KyMgQ29udHJpYnV0b3I6IFNlcmdlaSBMdWtpbiA8c2VyZ2VqLmx1a2luQGdtYWlsLmNvbT4NCiAj IENvbnRyaWJ1dG9yOiDFgXVrYXN6IEplbmRyeXNpayA8c2NhZHVAeWFuZGV4LmNvbT4NCiAjIE1h aW50YWluZXI6IE5hdGFuYWVsIENvcGEgPG5jb3BhQGFscGluZWxpbnV4Lm9yZz4NCiBwa2duYW1l PWJhc2gNCkBAIC01LDcgKzYsNyBAQCBwa2d2ZXI9NC4zLjQ2DQogX3BhdGNobGV2ZWw9JHtwa2d2 ZXIjIyoufQ0KIF9teXZlcj0ke3BrZ3ZlciUuKn0NCiBfcGF0Y2hiYXNlPSR7X215dmVyLy4vfQ0K LXBrZ3JlbD00DQorcGtncmVsPTUNCiBwa2dkZXNjPSJUaGUgR05VIEJvdXJuZSBBZ2FpbiBzaGVs bCINCiB1cmw9Imh0dHA6Ly93d3cuZ251Lm9yZy9zb2Z0d2FyZS9iYXNoL2Jhc2guaHRtbCINCiBh cmNoPSJhbGwiDQpAQCAtMTgsNyArMTksMTMgQEAgc291cmNlPSJodHRwOi8vZnRwLmdudS5vcmcv Z251L2Jhc2gvYmFzaC0ke19teXZlcn0udGFyLmd6DQogCWJhc2gtbm9pbmZvLnBhdGNoDQogCXBy aXZtb2RlLXNldHVpZC1mYWlsLnBhdGNoDQogCUNWRS0yMDE2LTc1NDMucGF0Y2gNCisJQ1ZFLTIw MTYtOTQwMS5wYXRjaA0KIAkiDQorDQorIyBzZWNmaXhlczoNCisjICAgNC4zLjQ2LXI1Og0KKyMg ICAgIC0gQ1ZFLTIwMTYtOTQwMQ0KKw0KICMgZ2VuZXJhdGUgdXJsJ3MgdG8gcGF0Y2hlcy4gbm90 ZTogbm8gZm9ya3MgYWxsb3dlZCENCiBfaT0xDQogX3BhZD0iMDAiDQpAQCAtNzQsNiArODEsNyBA QCBtZDVzdW1zPSI4MTM0ODkzMmQ1ZGEyOTQ5NTNlMTVkNDgxNGM3NGRkMSAgYmFzaC00LjMudGFy Lmd6DQogODBmZWM1ZjNkNjBhNjM3NTZhNDk5OWM4NzdlMzFhOGUgIGJhc2gtbm9pbmZvLnBhdGNo DQogYTU3N2Q0MmUzODI0OWQyOThkNmE4ZDRiZjI4MjM4ODMgIHByaXZtb2RlLXNldHVpZC1mYWls LnBhdGNoDQogMTdkYzkyYzBlN2QwMmI3NWMwZTlmYzBiMzM1ZDI0NzMgIENWRS0yMDE2LTc1NDMu cGF0Y2gNCiswZDhhNjYyN2UzMWUwNjQ3ZWUxMzU5ODFkZjYyOTVhMSAgQ1ZFLTIwMTYtOTQwMS5w YXRjaA0KIDFhYjY4MmI0ZTM2YWZhNGNmMWI0MjZhYTdhYzgxYzBkICBiYXNoNDMtMDAxDQogOGZj MjJjZjUwZWM4NWRhMDBmNmFmM2Q2NmY3ZGRjMWIgIGJhc2g0My0wMDINCiBhNDE3MjhlY2E3ODg1 ODc1OGUyNmI1ZGVhNjRhZTUwNiAgYmFzaDQzLTAwMw0KQEAgLTEyNCw2ICsxMzIsNyBAQCBzaGEy NTZzdW1zPSJhZmM2ODdhMjhlMGUyNGRjMjFiOTg4ZmExNTlmZjlkYmNmNmI3Y2FhOTJhZGU4NjQ1 Y2M2ZDU2MDVjZDAyNGQ0ICBiYQ0KIDM2M2JjOTE5ZDk4Y2FkYmZjYTI3NjYwYmUwZDFkNGJiNmNm ZTFjNWY4NmE3ODMwOTY2ZTQ1NmRmMzZlNDY3OTIgIGJhc2gtbm9pbmZvLnBhdGNoDQogNmJjMmQ0 ZTQ4YWQwNWZiM2M4YWFjMTIwYTAxMmJhZjE5MTFmNjUyMjQ2NGVkMThjODIzMmIxMTFhNDBiNzkw MSAgcHJpdm1vZGUtc2V0dWlkLWZhaWwucGF0Y2gNCiAyZTg0NGNhOWM3MTE3ZmMzNGFjODM3YzQy M2M2NWUxOTNiMGQxOTkwOTQzYjI5ZWM4NDNiYTQxNTA5MmM3N2M2ICBDVkUtMjAxNi03NTQzLnBh dGNoDQorZDMwZDk0OWJjZmRlOGRiMGQzNDQ4NTIwMGFhMjkxNzQ0MGU3N2RiODRmYjAwYTIzMGFh NjkxYjQ0Mzk2NjZjMSAgQ1ZFLTIwMTYtOTQwMS5wYXRjaA0KIGVjYjNkZmYyNjQ4NjY3NTEzZTMx NTU0YjNhZDA1NGNjZDg5ZmNlMzhlMzMzNjdjOTQ1OWFjM2EyODUxNTM3NDIgIGJhc2g0My0wMDEN CiBlZWU3Y2Q3MDYyYWIyOWE5ZTRmMDI5MjRkOWMzNjcyNjRkY2I4YjE2MjcwM2Y3NGZmNmViOGYx NzVhOTE1MDJiICBiYXNoNDMtMDAyDQogMDAwZTZlYWM1MGNkOTA1M2NlMDYzMGRiMDEyMzlkY2Rl YWQwNGEyYzJjMzUxYzQ3ZTJiNTFkYWMxYWMxMDg3ZCAgYmFzaDQzLTAwMw0KQEAgLTE3NCw2ICsx ODMsNyBAQCBzaGE1MTJzdW1zPSJhODUyYjhlNDZlZTU1NTY4ZGNlOWQyM2EzMGE5ZGJkMWM3NzBj MmQyYTRiYzkxZTFjMzE3N2Q3MjNiMzFiMzJjNWQ2OQ0KIDc0ZDUxNTUwY2MwMzQxMGYyMmZmZWEx M2Y2NDUyMzUwZDFlNTU2NGJmZjYxOWZiMDdhNWJiZWYxNGNhNTY1ZmJlMDM3NzBhMmMwMDQxMjky NzMyY2RhMTZlODk0NGIzM2NjYmQwZGZlMjlhNjA2YTA2OGZlZGFiZTI3N2NkNmFlICBiYXNoLW5v aW5mby5wYXRjaA0KIGM1ODA0YWNlNjU4ZjlkN2Y5NTdkNGI5OGJlYmFiNGQ4ZWIwYmEzZGQyZGQx NTVhNDgwYzdmOWIwZjE3YjA2Y2VkMzQ0YjRiNGM5ZjUyZWYxZDVjMGNhYmIwNDdiY2U1MjM3YzM1 MGY1M2I5NWNmNmM5NWUxNTZhYjRhYjllOGE5ICBwcml2bW9kZS1zZXR1aWQtZmFpbC5wYXRjaA0K IDVkMzYxMjFlMjAyYzQ5NWViMzgwZGU1ZjZmNDU2NjI2YzUzZjRiMDkxY2VhNThkMGYwMTI0MmRj ODZhM2E2ZTcyMGRiNzRkOWY4OTgyM2FmYzBlZGFlZjM1N2M3OWRkMjdjNDFkM2Y5Y2IyNDM2NjZj NTdiODM3MjE1MzZjMGYyICBDVkUtMjAxNi03NTQzLnBhdGNoDQorNjkwNzk3NDM1MmJmMDA5YTAz ODYyNzk0ZWViYzU5NjNmMzNiN2FiOWQzNzY4ZjFjZGU5MmY4NmQ5ZGM4OTlmZmI3ZjEzOTc2ODUw OTE2MWFiY2Q0MGZhMmMyZjg3NmRiMTE4Y2ExZDhiOGQ3OGZiYTZmMzAzNjAzNjRkMmVjMTEgIENW RS0yMDE2LTk0MDEucGF0Y2gNCiBhMTAxMTM5MjY1MjE4MGEyOGY5ODM3YWY0YTM0MWE4MGJlYjky OWMxNDU4ZTIzODRlMjgyZjAwMDc3MTNjNWZlOGQwYjMxNWFiZjEzNDBiMzcwNzc0OGQzY2FlZDMy MjEzNWRlZTg3YjU5ZWViNzYxMmVlNTEzMGY4N2Q3OTg4OCAgYmFzaDQzLTAwMQ0KIGUzMTc4Yzg1 ZjU1MzUyMmQ1ZDFjNWZkMzllNzZmMDE1YjY4MGE4Y2NjODQ4MzZhNWUxMDI4M2IyYWVkNmU1Yjdj YzNkMjNhZjBlNjdhMjcwYjc2MjJkY2UwYWJmMzVkZDhhOTVhZmE5YmI2Zjg5YjczYTk0MzlmNzQz NTE3NWE0ICBiYXNoNDMtMDAyDQogZGMyYzVmYWQ4ZDM1N2QxMzAxZTQxOWFmZDk1OWRmYWYwMTVh NjMxNzI4NTcwODBjMTFmNzdhYjFiYjdkMWQ3MzdmNDExZWIwZTcwYTg2MWY5OGEzNmJlZDFiMTll ZGI3MjE3YTRmYTlmNDc3M2UyMTcwNmI2MmRjNTZlYzM0NjQgIGJhc2g0My0wMDMNCmRpZmYgLS1n aXQgYS9tYWluL2Jhc2gvQ1ZFLTIwMTYtOTQwMS5wYXRjaCBiL21haW4vYmFzaC9DVkUtMjAxNi05 NDAxLnBhdGNoDQpuZXcgZmlsZSBtb2RlIDEwMDY0NA0KaW5kZXggMDAwMDAwMDAwMC4uNDIzNzMz MGU2ZA0KLS0tIC9kZXYvbnVsbA0KKysrIGIvbWFpbi9iYXNoL0NWRS0yMDE2LTk0MDEucGF0Y2gN CkBAIC0wLDAgKzEsMjcgQEANCisqKiogLi4vYmFzaC00LjQtcGF0Y2hlZC9idWlsdGlucy9wdXNo ZC5kZWYJMjAxNi0wMS0yNSAxMzozMTo0OS4wMDAwMDAwMDAgLTA1MDANCistLS0gYnVpbHRpbnMv cHVzaGQuZGVmCTIwMTYtMTAtMjggMTA6NDY6NDkuMDAwMDAwMDAwIC0wNDAwDQorKioqKioqKioq KioqKioqDQorKioqIDM2NiwzNzAgKioqKg0KKyAgICAgIH0NCisgIA0KKyEgICBpZiAod2hpY2gg PiBkaXJlY3RvcnlfbGlzdF9vZmZzZXQgfHwgKGRpcmVjdG9yeV9saXN0X29mZnNldCA9PSAwICYm IHdoaWNoID09IDApKQ0KKyAgICAgIHsNCisgICAgICAgIHB1c2hkX2Vycm9yIChkaXJlY3Rvcnlf bGlzdF9vZmZzZXQsIHdoaWNoX3dvcmQgPyB3aGljaF93b3JkIDogIiIpOw0KKy0tLSAzNjYsMzcw IC0tLS0NCisgICAgICB9DQorICANCishICAgaWYgKHdoaWNoID4gZGlyZWN0b3J5X2xpc3Rfb2Zm c2V0IHx8ICh3aGljaCA8IC1kaXJlY3RvcnlfbGlzdF9vZmZzZXQpIHx8IChkaXJlY3RvcnlfbGlz dF9vZmZzZXQgPT0gMCAmJiB3aGljaCA9PSAwKSkNCisgICAgICB7DQorICAgICAgICBwdXNoZF9l cnJvciAoZGlyZWN0b3J5X2xpc3Rfb2Zmc2V0LCB3aGljaF93b3JkID8gd2hpY2hfd29yZCA6ICIi KTsNCisqKioqKioqKioqKioqKioNCisqKiogMzg4LDM5MSAqKioqDQorLS0tIDM4OCwzOTYgLS0t LQ0KKyAgCSBvZiB0aGUgbGlzdCBpbnRvIHBsYWNlLiAqLw0KKyAgICAgICAgaSA9IChkaXJlY3Rp b24gPT0gJysnKSA/IGRpcmVjdG9yeV9saXN0X29mZnNldCAtIHdoaWNoIDogd2hpY2g7DQorKyAg ICAgICBpZiAoaSA8IDAgfHwgaSA+IGRpcmVjdG9yeV9saXN0X29mZnNldCkNCisrIAl7DQorKyAJ ICBwdXNoZF9lcnJvciAoZGlyZWN0b3J5X2xpc3Rfb2Zmc2V0LCB3aGljaF93b3JkID8gd2hpY2hf d29yZCA6ICIiKTsNCisrIAkgIHJldHVybiAoRVhFQ1VUSU9OX0ZBSUxVUkUpOw0KKysgCX0NCisg ICAgICAgIGZyZWUgKHB1c2hkX2RpcmVjdG9yeV9saXN0W2ldKTsNCisgICAgICAgIGRpcmVjdG9y eV9saXN0X29mZnNldC0tOw0KLS0gDQoyLjExLjANCg0KDQoNCi0tLQ0KVW5zdWJzY3JpYmU6ICBh bHBpbmUtYXBvcnRzK3Vuc3Vic2NyaWJlQGxpc3RzLmFscGluZWxpbnV4Lm9yZw0KSGVscDogICAg ICAgICBhbHBpbmUtYXBvcnRzK2hlbHBAbGlzdHMuYWxwaW5lbGludXgub3JnDQotLS0NCg==