lp:debian/jessie/bash

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

34. By Matthias Klose on 2014-10-07

* Apply upstream patches 028 - 030.
* Remove the parser-oob patch.

33. By Matthias Klose on 2014-09-30

* Apply upstream patches 026 and 027.
* Remove patches CVE-2014-6271 and variables-affix.

32. By Thijs Kinkhorst on 2014-09-25

* Non-maintainer upload by the Security Team.
* Add variables-affix.patch patch.
  Apply patch from Florian Weimer to add prefix and suffix for environment
  variable names which contain shell functions.
* Add parser-oob.patch patch.
  Fixes two out-of-bound array accesses in the bash parser.

31. By Florian Weimer on 2014-09-24

* Non-maintainer upload by the security team
* Apply upstream patch bash43-025, fixing CVE-2014-6271.

30. By Matthias Klose on 2014-08-21

* Apply upstream patches 023 - 024, fixing the issues:
  - bash does not correctly parse process substitution constructs that
    contain unbalanced parentheses as part of the contained command.
  - Indirect variable references do not work correctly if the reference
    variable expands to an array reference using a subscript other than 0
    (e.g., foo='bar[1]' ; echo ${!foo}).
* debian/skel.bashrc: Add GCC_COLORS setting (disabled by default).

29. By Matthias Klose on 2014-08-03

* Apply upstream patches 012 - 022, fixing the issues:
  - When a SIGCHLD trap runs a command containing a shell builtin while a
    script is running `wait' to wait for all running children to complete,
    the SIGCHLD trap will not be run once for each child that terminates.
  - Using reverse-i-search when horizontal scrolling is enabled does not
    redisplay the entire line containing the successful search results.
  - Under certain circumstances, $@ is expanded incorrectly in contexts
    where word splitting is not performed.
  - When completing directory names, the directory name is dequoted twice.
    This causes problems for directories with single and double quotes in
    their names.
  - An extended glob pattern containing a slash (`/') causes the globbing
    code to misinterpret it as a directory separator.
  - The code that creates local variables should not clear the `invisible'
    attribute when returning an existing local variable. Let the code that
    actually assigns a value clear it.
  - When assigning an array variable using the compound assignment syntax,
    but using `declare' with the rhs of the compound assignment quoted, the
    shell did not mark the variable as visible after successfully performing
    the assignment.
  - The -t timeout option to `read' does not work when the -e option is used.
    LP: #1317476.
  - When PS2 contains a command substitution, here-documents entered in an
    interactive shell can sometimes cause a segmentation fault.
  - When the readline `revert-all-at-newline' option is set, pressing newline
    when the current line is one retrieved from history results in a double
    free and a segmentation fault. Closes: #747341.
  - Using nested pipelines within loops with the `lastpipe' option set can
    result in a segmentation fault.
* Fix typo in package description. Closes: #707810.

28. By Matthias Klose on 2014-04-16

* Apply upstream patches 009 - 011 (replacing local patches):
  - Fix a problem with unsigned sign extension when attempting to reallocate
    the input line when it is fewer than 3 characters long and there has been
    a history expansion. The sign extension causes the shell to not
    reallocate the line, which results in a segmentation fault when it writes
    past the end.
  - Change the behavior of programmable completion to compensate for two
    assumptions made by the bash-completion package.
  - The signal handling changes to bash and readline (to avoid running any
    code in a signal handler context) cause the cursor to be placed on the
    wrong line of a multi-line command after a ^C interrupts editing.

27. By Matthias Klose on 2014-04-07

* Apply upstream patches 001 - 008:
  - A missing check for a valid option prevented `test -R' from working.
    There is another problem that causes bash to look up the wrong variable
    name when processing the argument to `test -R'.
  - A change to save state while running the DEBUG trap caused pipelines to
    hang on systems which need process group synchronization while building
    pipelines.
  - When in callback mode, some readline commands can cause readline
    to segfault by passing invalid contexts to callback functions.
  - The `.' command in vi mode cannot undo multi-key commands beginning with
    `c', `d', and `y' (command plus motion specifier).
  - When in Posix mode, bash did not correctly interpret the ANSI-C-style
    $'...' quoting mechanism when performing pattern substitution word
    expansions within double quotes.
  - A shell that started with job control active but was not interactive left
    the terminal in the wrong process group when exiting, causing its parent
    shell to get a stop signal when it attempted to read from the terminal.
  - Using compound assignments for associative arrays like
      assoc=( [x]= [y]=bar )
    left the value corresponding to the key `x' NULL. This caused
    subsequent lookups to interpret it as unset.
  - Some extended glob patterns incorrectly matched filenames with a leading
    dot, regardless of the setting of the `dotglob' option.
* Replace already applied patches by the upstream patch files.

26. By Matthias Klose on 2014-03-29

* Fix a display issue when a multiline command is aborted with ^C.
* Fix a crash after a failed history expansion. LP: #1294669.

25. By Matthias Klose on 2014-03-21

* Fix an issue with an associative array expanding to the
  empty string if the associated value is the empty string.
* Fix an issue, when invoked as sh, bash doesn't interpret C-style escapes
  within double-quoted substitution expansions ("${var/$'what'/ever}").
* Fix an issue with the extglob option to not expand hidden files.
* Update the pcomplete-dequote patch.