Note that patch only appeared today, despite CVE being out a few days ago. http://openwall.com/lists/oss-security/2014/09/28/10 http://openwall.com/lists/oss-s

Note that patch only appeared today, despite CVE being out a few days ago. http://openwall.com/lists/oss-security/2014/09/28/10 http://openwall.com/lists/oss-security/2014/09/28/10 There are two local buffer overflows in parse.y that can cause the shell to dump core when given many here-documents attached to a single command or many nested loops. http://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/bash43-028 http://ftp.gnu.org/pub/gnu/bash/bash-4.3-patches/bash43-028