Merge pull request #881 from marineam/bump

coreos-init: re-enable motdgen
bash: fix CVE-2014-7169

http://www.openwall.com/lists/oss-security/2014/09/26/1
Merge pull request #882 from marineam/bash-fix

bash: fix CVE-2014-7169
go: update to go 1.3.2
gsutil: upgrade to 4.6, switch to using upstream ebuilds
Merge pull request #885 from marineam/go

go: update to go 1.3.2
Merge pull request #886 from marineam/gsutil

gsutil: upgrade to 4.6, switch to using upstream ebuilds
Disable "high performance ssh" openssh patch Gentoo includes

Prioritizing security and stability over performance in SSH, omitting
this kind of patch is generally more consistent with our objectives.

Visibly this removes "-hpn14v4" from the OpenSSH protocol banner:
SSH-2.0-OpenSSH_6.6p1-hpn14v4

Discussion: https://github.com/coreos/bugs/issues/149
Merge pull request #887 from vcaputo/nohpnssh

Disable "high performance ssh" openssh patch Gentoo includes
coreos-base/coreos-cloudinit: bump to v0.10.5
bash: function export hardening patch

Another day another bash version bump. This is the final version of the
patch to add a special prefix and suffix to exported functions in the
environment, preventing bugs similar to the previous two from becoming
remotely exploitable.

http://lists.gnu.org/archive/html/bug-bash/2014-09/msg00279.html

There still remain two less significant memory-access issues, dubbed
CVE-2014-7186 and CVE-2014-7187. So expect another bump soon.
http://www.openwall.com/lists/oss-security/2014/09/25/32
Merge pull request #889 from marineam/bash50

bash: function export hardening patch
fleet: bump to v0.8.2
bash: fix CVE-2014-7186 and CVE-2014-7187

Sync up with upstream gentoo, pulling in the final version of the patch
for these issues. This is functionally equivalent to 4.2_p51 but
upstream hasn't officially announced that version yet it seems.
fleet: prune old version
Merge pull request #892 from bcwaldon/bump-fleet

fleet v0.8.2
Merge pull request #893 from marineam/bash50

bash: fix CVE-2014-7186 and CVE-2014-7187
Merge pull request #894 from marineam/fleet

fleet: prune old version
Merge pull request #888 from crawford/cloudinit

coreos-base/coreos-cloudinit: bump to v0.10.5
verity: prune old broken package from ChromeOS

When we add verity support we will be relying on generic packages such
as cryptsetup instead of whatever unknown bits are in this code base. It
has stopped building and I thought I removed it ages ago. Oops.