Re: CVE-2016-0634 -- bash prompt expanding $HOSTNAME

[Chet Ramey <chet.ramey () case edu>]

> > I believe the fix in parse.y is this (Chet, please correct me if I'm wrong):
>
> Yes, that is the current fix for this.  There are other ways to do it.

Here's a patch to bash-4.3 that will fix this.

Chet

Attachment: prompt-string-comsub.patch
Description:

``The lyf so short, the craft so long to lerne.'' - Chaucer
                 ``Ars longa, vita brevis'' - Hippocrates
Chet Ramey, UTech, CWRU    chet () case edu    http://cnswww.cns.cwru.edu/~chet/