lp:ubuntu/trusty-security/bash

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

78. By Marc Deslauriers on 2014-10-07

* SECURITY UPDATE: incorrect function definition parsing with
  here-document delimited by end-of-file
  - debian/patches/CVE-2014-6277.diff: properly handle closing delimiter
    in copy_cmd.c, make_cmd.c.
  - CVE-2014-6277
* SECURITY UPDATE: incorrect function definition parsing via nested
  command substitutions
  - debian/patches/CVE-2014-6278.diff: properly handle certain parsing
    attempts in builtins/evalstring.c, parse.y, shell.h, y.tab.c.
  - CVE-2014-6278
* Updated patches with official upstream versions:
  - debian/patches/CVE-2014-6271.diff
  - debian/patches/CVE-2014-7169.diff
  - debian/patches/variables-affix.diff
  - debian/patches/CVE-2014-718x.diff

77. By Marc Deslauriers on 2014-09-26

* SECURITY UPDATE: out-of-bounds memory access
  - debian/patches/CVE-2014-718x.diff: guard against overflow and fix
    off-by-one in parse.y and y.tab.c.
  - CVE-2014-7186
  - CVE-2014-7187
* SECURITY IMPROVEMENT: use prefixes and suffixes for function exports
  - debian/patches/variables-affix.diff: add prefixes and suffixes in
    variables.c.

76. By Marc Deslauriers on 2014-09-25

Updated debian/patches/CVE-2014-7169.diff to also patch y.tab.c in
case it doesn't get regenerated when built (LP: #1374207)

75. By Marc Deslauriers on 2014-09-25

* SECURITY UPDATE: incomplete fix for CVE-2014-6271
  - debian/patches/CVE-2014-7169.diff: fix logic in parse.y.
  - CVE-2014-7169

74. By Marc Deslauriers on 2014-09-22

* SECURITY UPDATE: incorrect function parsing
  - debian/patches/CVE-2014-6271.diff: fix function parsing in
    builtins/common.h, builtins/evalstring.c, subst.c, variables.c.
  - CVE-2014-6271

73. By Matthias Klose on 2014-04-07

* Merge with Debian; remaining changes:
  - skel.bashrc:
    - Run lesspipe.
    - Enable ls aliases.
    - Set options in ll alias to -alF.
    - Define an alert alias.
    - Enabled colored grep aliases.
  - etc.bash.bashrc:
    - Add sudo hint.

72. By Matthias Klose on 2014-03-28

* Fix a display issue when a multiline command is aborted with ^C.
* Fix a crash after a failed history expansion. LP: #1294669.

71. By Matthias Klose on 2014-03-21

* Merge with Debian; remaining changes:
  - skel.bashrc:
    - Run lesspipe.
    - Enable ls aliases.
    - Set options in ll alias to -alF.
    - Define an alert alias.
    - Enabled colored grep aliases.
  - etc.bash.bashrc:
    - Add sudo hint.

70. By Matthias Klose on 2014-03-19

* Merge with Debian; remaining changes:
  - skel.bashrc:
    - Run lesspipe.
    - Enable ls aliases.
    - Set options in ll alias to -alF.
    - Define an alert alias.
    - Enabled colored grep aliases.
  - etc.bash.bashrc:
    - Add sudo hint.

69. By Matthias Klose on 2014-03-05

* Merge with Debian; remaining changes:
  - skel.bashrc:
    - Run lesspipe.
    - Enable ls aliases.
    - Set options in ll alias to -alF.
    - Define an alert alias.
    - Enabled colored grep aliases.
  - etc.bash.bashrc:
    - Add sudo hint.