Change log for bash package in Ubuntu

175 of 152 results
Published in oracular-release
Published in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
bash (5.2.21-2ubuntu4) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <email address hidden>  Sun, 31 Mar 2024 08:41:03 +0000
Superseded in noble-proposed
bash (5.2.21-2ubuntu3) noble; urgency=medium

  * Rebuild to pick up the t64 ABIs from glibc (LP: #2059078)

 -- Simon Chopin <email address hidden>  Tue, 26 Mar 2024 18:18:11 +0100

Available diffs

Published in jammy-updates
Published in jammy-security
bash (5.1-6ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: heap-buffer overflow in valid parameter_transform
    - debian/patches/CVE-2022-3715.patch: add extra check to subst.c.
    - CVE-2022-3715

 -- Marc Deslauriers <email address hidden>  Thu, 14 Mar 2024 07:31:47 -0400
Deleted in noble-updates (Reason: superseded by release)
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
bash (5.2.21-2ubuntu2) noble; urgency=medium

  * DEP17: Move files to /usr

 -- Julian Andres Klode <email address hidden>  Thu, 22 Feb 2024 11:31:00 +0100
Superseded in noble-release
Deleted in noble-proposed (Reason: Moved to noble)
bash (5.2.21-2ubuntu1) noble; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Superseded in noble-proposed
bash (5.2.15-2ubuntu2) noble; urgency=medium

  * Correct the bash(1) man-page to note that --rcfile does not prevent the
    execution of the system-wide /etc/bash.bashrc file (LP: #1097467)

 -- Dave Jones <email address hidden>  Tue, 14 Nov 2023 11:31:40 +0000
Superseded in noble-release
Published in mantic-release
Published in lunar-release
Deleted in lunar-proposed (Reason: Moved to lunar)
bash (5.2.15-2ubuntu1) lunar; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in lunar-release
Obsolete in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic)
bash (5.2-1ubuntu2) kinetic; urgency=medium

  * debian/patches: Import two upstream patches to fix crashes:
      - Bash-5.2-patch-1-fix-crash-with-unset-arrays-in-arit.diff
      - Bash-5.2-patch-2-fix-crash-in-readline-when-started-.diff (LP:#1992206)

 -- Nick Rosbrook <email address hidden>  Fri, 07 Oct 2022 17:03:05 -0400

Available diffs

Superseded in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic)
bash (5.2-1ubuntu1) kinetic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in kinetic-release
Deleted in kinetic-proposed (Reason: Moved to kinetic)
bash (5.2~rc2-2ubuntu1) kinetic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Superseded in kinetic-proposed
bash (5.2~rc2-1ubuntu1) kinetic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Published in focal-updates
Published in focal-security
bash (5.0-6ubuntu1.2) focal-security; urgency=medium

  * SECURITY UPDATE: privilege gain via setuid
    - debian/patches/CVE-2019-18276.patch: replace the use of
      setuid and setgid when possible with setresuid and setresgid,
      respectively.
    - CVE-2019-18276

 -- David Fernandez Gonzalez <email address hidden>  Mon, 18 Apr 2022 11:14:46 +0200
Published in bionic-updates
Published in bionic-security
bash (4.4.18-2ubuntu1.3) bionic-security; urgency=medium

  * SECURITY UPDATE: privilege gain via setuid
    - debian/patches/CVE-2019-18276.patch: replace the use of
      setuid and setgid when possible with setresuid and setresgid,
      respectively.
    - CVE-2019-18276

 -- David Fernandez Gonzalez <email address hidden>  Mon, 18 Apr 2022 17:08:18 +0200
Superseded in kinetic-release
Published in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
bash (5.1-6ubuntu1) jammy; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in jammy-release
Deleted in jammy-proposed (Reason: Moved to jammy)
bash (5.1-5ubuntu1) jammy; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in jammy-release
Obsolete in impish-release
Deleted in impish-proposed (Reason: Moved to impish)
bash (5.1-3ubuntu2) impish; urgency=medium

  * No-change rebuild to build packages with zstd compression.

 -- Matthias Klose <email address hidden>  Thu, 07 Oct 2021 12:09:33 +0200

Available diffs

Superseded in impish-release
Deleted in impish-proposed (Reason: Moved to impish)
bash (5.1-3ubuntu1) impish; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in impish-release
Obsolete in hirsute-release
Deleted in hirsute-proposed (Reason: Moved to hirsute)
bash (5.1-2ubuntu1) hirsute; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
bash (5.1-1ubuntu1) hirsute; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
bash (5.1~rc3-1ubuntu1) hirsute; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Superseded in hirsute-release
Deleted in hirsute-proposed (Reason: moved to Release)
bash (5.1~rc2-1ubuntu1) hirsute; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in focal-updates
Deleted in focal-proposed (Reason: moved to -updates)
bash (5.0-6ubuntu1.1) focal; urgency=medium

  * Apply upstream patches 017 (LP: #1878517)

 -- Matthieu Clemenceau <email address hidden>  Thu, 18 Jun 2020 10:44:55 -0500

Available diffs

Superseded in hirsute-release
Obsolete in groovy-release
Deleted in groovy-proposed (Reason: moved to Release)
bash (5.0-6ubuntu2) groovy; urgency=medium

  * Apply upstream patches 017 (LP: #1878517)

 -- Matthieu Clemenceau <email address hidden>  Thu, 18 Jun 2020 10:44:55 -0500

Available diffs

Superseded in groovy-release
Published in focal-release
Deleted in focal-proposed (Reason: moved to Release)
bash (5.0-6ubuntu1) focal; urgency=medium

  * Merge from Debian unstable.  Remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in focal-release
Deleted in focal-proposed (Reason: moved to Release)
bash (5.0-5ubuntu1) focal; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Published in precise-updates
Published in precise-security
bash (4.2-2ubuntu2.9) precise-security; urgency=medium

  * SECURITY UPDATE: Heap-based buffer overflow
    - debian/patches/CVE-2012-6711.patch: making u32cconv() return
      the number of bytes instead a negative value  in
      lib/sh/unicode.c
    - CVE-2012-6711

 -- <email address hidden> (Leonidas S. Barbosa)  Fri, 08 Nov 2019 09:46:02 -0300
Published in xenial-updates
Published in xenial-security
bash (4.3-14ubuntu1.4) xenial-security; urgency=medium

  * SECURITY UPDATE: rbash restriction bypass (LP: #1803441)
    - debian/patches/CVE-2019-9924.patch: if the shell is restricted,
      reject attempts to add pathnames containing slashes to the hash table
      in variables.c.
    - CVE-2019-9924

 -- Marc Deslauriers <email address hidden>  Fri, 12 Jul 2019 14:25:28 -0400

Available diffs

Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
bash (4.4.18-2ubuntu1.2) bionic; urgency=medium

  * d/p/bash44-020.diff: Add fix for hang on 'wait' statement
    (LP: #1822776)

 -- Bryce Harrington <email address hidden>  Thu, 06 Jun 2019 15:28:15 -0700
Obsolete in cosmic-proposed
bash (4.4.18-2ubuntu3.1) cosmic; urgency=medium

  * d/p/bash44-020.diff: Add fix for hang on 'wait' statement
    (LP: #1822776)

 -- Bryce Harrington <email address hidden>  Thu, 06 Jun 2019 17:54:43 -0700
Superseded in focal-release
Obsolete in eoan-release
Deleted in eoan-proposed (Reason: moved to release)
bash (5.0-4ubuntu1) eoan; urgency=low

  * Merge from Debian unstable.  Remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.
    - Resurrect "Set the default path to comply with Debian policy" in
      deb-bash-config.diff.
    - Add autopkgtest for the built-in path.

Available diffs

Superseded in xenial-updates
Deleted in xenial-proposed (Reason: moved to -updates)
bash (4.3-14ubuntu1.3) xenial; urgency=medium

  * Resurrect "Set the default path to comply with Debian policy" in
    deb-bash-config.diff which went missing since 4.2+dfsg-1 or so.
    LP: #1792004 LP: #1614080 Closes: #781367
  * Add autopkgtest for the built-in path.

 -- Dimitri John Ledkov <email address hidden>  Fri, 03 May 2019 14:57:15 +0100
Superseded in bionic-updates
Deleted in bionic-proposed (Reason: moved to -updates)
bash (4.4.18-2ubuntu1.1) bionic; urgency=medium

  * Resurrect "Set the default path to comply with Debian policy" in
    deb-bash-config.diff which went missing since 4.2+dfsg-1 or so.
    LP: #1792004 LP: #1614080 Closes: #781367
  * Add autopkgtest for the built-in path.

 -- Dimitri John Ledkov <email address hidden>  Fri, 03 May 2019 14:50:32 +0100
Obsolete in disco-updates
Deleted in disco-proposed (Reason: moved to -updates)
bash (5.0-3ubuntu1.1) disco; urgency=medium

  * Resurrect "Set the default path to comply with Debian policy" in
    deb-bash-config.diff which went missing since 4.2+dfsg-1 or so.
    LP: #1792004 LP: #1614080 Closes: #781367
  * Add autopkgtest for the built-in path.

 -- Dimitri John Ledkov <email address hidden>  Fri, 03 May 2019 14:31:24 +0100

Available diffs

Superseded in eoan-release
Deleted in eoan-proposed (Reason: moved to release)
bash (5.0-3ubuntu2) eoan; urgency=medium

  * Resurrect "Set the default path to comply with Debian policy" in
    deb-bash-config.diff which went missing since 4.2+dfsg-1 or so.
    LP: #1792004 LP: #1614080 Closes: #781367
  * Add autopkgtest for the built-in path.

 -- Dimitri John Ledkov <email address hidden>  Fri, 03 May 2019 14:31:24 +0100

Available diffs

Superseded in eoan-release
Obsolete in disco-release
Deleted in disco-proposed (Reason: moved to release)
bash (5.0-3ubuntu1) disco; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release)
bash (5.0-2ubuntu1) disco; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in disco-release
Deleted in disco-proposed (Reason: moved to release)
bash (5.0-1ubuntu1) disco; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in disco-release
Obsolete in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
bash (4.4.18-2ubuntu3) cosmic; urgency=medium

  * Resurrect "Set the default path to comply with Debian policy" in
    deb-bash-config.diff which went missing since 4.2+dfsg-1 or so.
    LP: #1792004 LP: #1614080 Closes: #781367
  * Add autopkgtest for the built-in path.

 -- Dimitri John Ledkov <email address hidden>  Wed, 12 Sep 2018 15:22:11 +0100
Superseded in cosmic-release
Deleted in cosmic-proposed (Reason: moved to release)
bash (4.4.18-2ubuntu2) cosmic; urgency=medium

  * No-change rebuild for libtinfo soname change.

 -- Matthias Klose <email address hidden>  Thu, 03 May 2018 14:51:00 +0200

Available diffs

Superseded in cosmic-release
Published in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
bash (4.4.18-2ubuntu1) bionic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Deleted in bionic-proposed (Reason: xnox should pay more attention to IRC.)
bash (4.4.18-1.1ubuntu1) bionic; urgency=low

  * Merge with Debian; remaining changes (LP: #1751011):
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in bionic-release
Deleted in bionic-proposed (Reason: moved to release)
bash (4.4.18-1ubuntu1) bionic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in bionic-release
Obsolete in artful-release
Deleted in artful-proposed (Reason: moved to release)
bash (4.4-5ubuntu1) artful; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Published in trusty-updates
Published in trusty-security
bash (4.3-7ubuntu1.7) trusty-security; urgency=medium

  * SECURITY UPDATE: word expansions on the prompt strings (LP: #1507025)
    - debian/patches/bash43-047.diff: add quoting to parse.y, y.tab.c.
    - CVE-2016-0634
  * SECURITY UPDATE: code execution via crafted SHELLOPTS and PS4
    (LP: #1689304)
    - debian/patches/bash43-048.diff: check for root in variables.c.
    - CVE-2016-7543
  * SECURITY UPDATE: restricted shell bypass via use-after-free
    - debian/patches/bash44-006.diff: check for negative offsets in
      builtins/pushd.def.
    - CVE-2016-9401

 -- Marc Deslauriers <email address hidden>  Tue, 16 May 2017 07:52:48 -0400
Superseded in xenial-updates
Superseded in xenial-security
bash (4.3-14ubuntu1.2) xenial-security; urgency=medium

  * SECURITY UPDATE: word expansions on the prompt strings (LP: #1507025)
    - debian/patches/bash43-047.diff: add quoting to parse.y, y.tab.c.
    - CVE-2016-0634
  * SECURITY UPDATE: code execution via crafted SHELLOPTS and PS4
    (LP: #1689304)
    - debian/patches/bash43-048.diff: check for root in variables.c.
    - CVE-2016-7543
  * SECURITY UPDATE: restricted shell bypass via use-after-free
    - debian/patches/bash44-006.diff: check for negative offsets in
      builtins/pushd.def.
    - CVE-2016-9401

 -- Marc Deslauriers <email address hidden>  Tue, 16 May 2017 07:51:45 -0400

Available diffs

Obsolete in yakkety-updates
Obsolete in yakkety-security
bash (4.3-15ubuntu1.1) yakkety-security; urgency=medium

  * SECURITY UPDATE: word expansions on the prompt strings (LP: #1507025)
    - debian/patches/bash43-047.diff: add quoting to parse.y, y.tab.c.
    - CVE-2016-0634
  * SECURITY UPDATE: code execution via crafted SHELLOPTS and PS4
    (LP: #1689304)
    - debian/patches/bash43-048.diff: check for root in variables.c.
    - CVE-2016-7543
  * SECURITY UPDATE: restricted shell bypass via use-after-free
    - debian/patches/bash44-006.diff: check for negative offsets in
      builtins/pushd.def.
    - CVE-2016-9401

 -- Marc Deslauriers <email address hidden>  Tue, 16 May 2017 07:44:56 -0400
Obsolete in zesty-updates
Obsolete in zesty-security
bash (4.4-2ubuntu1.1) zesty-security; urgency=medium

  * SECURITY UPDATE: restricted shell bypass via use-after-free
    - debian/patches/bash44-006.diff: check for negative offsets in
      builtins/pushd.def.
    - CVE-2016-9401
  * SECURITY UPDATE: privilege escalation via path autocompletion
    - debian/patches/bash44-007.diff: properly handle quotes in bashline.c,
      subst.c.
    - CVE-2017-5932

 -- Marc Deslauriers <email address hidden>  Tue, 16 May 2017 07:35:02 -0400
Superseded in artful-release
Obsolete in zesty-release
Deleted in zesty-proposed (Reason: moved to release)
bash (4.4-2ubuntu1) zesty; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in trusty-updates
Deleted in trusty-proposed (Reason: moved to -updates)
bash (4.3-7ubuntu1.6) trusty-proposed; urgency=medium

  * When the readline `revert-all-at-newline' option is set, pressing newline
    when the current line is one retrieved from history results in a double
    free and a segmentation fault. LP: #1422795.

 -- Jeffrey Hutzelman <email address hidden>  Fri, 16 Oct 2015 17:21:23 -0400
Superseded in zesty-release
Deleted in zesty-proposed (Reason: moved to release)
bash (4.4-1ubuntu1) zesty; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in xenial-updates
Deleted in xenial-proposed (Reason: moved to -updates)
bash (4.3-14ubuntu1.1) xenial-proposed; urgency=medium

  * SRU: LP: #1595869.
  * Apply upstream patches 043 - 046. Fixes:
    - When the lastpipe option is enabled, the last component can contain
      nested pipelines and cause a segmentation fault under
      certain circumstances.
    - A typo prevents the `compat42' shopt option from working as intended.
    - If a file open attempted as part of a redirection fails because it is
      interrupted by a signal, the shell needs to process any pending traps
      to allow the redirection to be canceled.
    - An incorrect conversion from an indexed to associative array can result
      in a core dump.
  * Add $HOME/.local/bin to PATH, and add the user's home directories
    unconditionally to the path, so that they are available without
    a new login. Closes: #820856, LP: #1588562.

 -- Matthias Klose <email address hidden>  Fri, 24 Jun 2016 10:20:17 +0200

Available diffs

Superseded in zesty-release
Obsolete in yakkety-release
Deleted in yakkety-proposed (Reason: moved to release)
bash (4.3-15ubuntu1) yakkety; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in yakkety-release
Deleted in yakkety-proposed (Reason: moved to release)
bash (4.3-14ubuntu2) yakkety; urgency=medium

  * Disable building with pie (LP: #1518483)

 -- Steve Beattie <email address hidden>  Mon, 25 Apr 2016 15:00:52 -0700

Available diffs

Superseded in yakkety-release
Published in xenial-release
Obsolete in wily-release
Deleted in wily-proposed (Reason: moved to release)
bash (4.3-14ubuntu1) wily; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in wily-release
Deleted in wily-proposed (Reason: moved to release)
bash (4.3-13ubuntu1) wily; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in wily-release
Deleted in wily-proposed (Reason: moved to release)
bash (4.3-11ubuntu3) wily; urgency=medium

  * debian/patches/privmode.diff: disabled patch to re-enable proper
    privilege dropping security feature. (LP: #1459201)

 -- Marc Deslauriers <email address hidden>  Wed, 27 May 2015 10:57:56 -0400

Available diffs

Superseded in wily-release
Obsolete in vivid-release
Deleted in vivid-proposed (Reason: moved to release)
bash (4.3-11ubuntu2) vivid; urgency=medium

  * debian/etc.bash.bashrc: print a hint how to get root access if user
    is in sudo group (lp: #1358827)
 -- Andrey Bondarenko <email address hidden>   Wed, 29 Oct 2014 08:08:56 -0400

Available diffs

Superseded in trusty-updates
Superseded in trusty-security
bash (4.3-7ubuntu1.5) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect function definition parsing with
    here-document delimited by end-of-file
    - debian/patches/CVE-2014-6277.diff: properly handle closing delimiter
      in copy_cmd.c, make_cmd.c.
    - CVE-2014-6277
  * SECURITY UPDATE: incorrect function definition parsing via nested
    command substitutions
    - debian/patches/CVE-2014-6278.diff: properly handle certain parsing
      attempts in builtins/evalstring.c, parse.y, shell.h, y.tab.c.
    - CVE-2014-6278
  * Updated patches with official upstream versions:
    - debian/patches/CVE-2014-6271.diff
    - debian/patches/CVE-2014-7169.diff
    - debian/patches/variables-affix.diff
    - debian/patches/CVE-2014-718x.diff
 -- Marc Deslauriers <email address hidden>   Tue, 07 Oct 2014 10:50:12 -0400

Available diffs

Superseded in precise-updates
Superseded in precise-security
bash (4.2-2ubuntu2.6) precise-security; urgency=medium

  * SECURITY UPDATE: incorrect function definition parsing with
    here-document delimited by end-of-file
    - debian/patches/CVE-2014-6277.diff: properly handle closing delimiter
      in bash/copy_cmd.c, bash/make_cmd.c.
    - CVE-2014-6277
  * SECURITY UPDATE: incorrect function definition parsing via nested
    command substitutions
    - debian/patches/CVE-2014-6278.diff: properly handle certain parsing
      attempts in bash/builtins/evalstring.c, bash/parse.y, bash/shell.h.
    - CVE-2014-6278
  * Updated patches with official upstream versions:
    - debian/patches/CVE-2014-6271.diff
    - debian/patches/CVE-2014-7169.diff
    - debian/patches/variables-affix.diff
    - debian/patches/CVE-2014-718x.diff
 -- Marc Deslauriers <email address hidden>   Tue, 07 Oct 2014 11:05:06 -0400

Available diffs

Obsolete in lucid-updates
Obsolete in lucid-security
bash (4.1-2ubuntu3.5) lucid-security; urgency=medium

  * SECURITY UPDATE: incorrect function definition parsing with
    here-document delimited by end-of-file
    - debian/patches/CVE-2014-6277.dpatch: properly handle closing
      delimiter in copy_cmd.c, make_cmd.c.
    - CVE-2014-6277
  * SECURITY UPDATE: incorrect function definition parsing via nested
    command substitutions
    - debian/patches/CVE-2014-6278.dpatch: properly handle certain parsing
      attempts in builtins/evalstring.c, parse.y, shell.h.
    - CVE-2014-6278
  * debian/rules: added new patches to list.
  * Updated patches with official upstream versions:
    - debian/patches/CVE-2014-6271.dpatch
    - debian/patches/CVE-2014-7169.dpatch
    - debian/patches/variables-affix.dpatch
    - debian/patches/CVE-2014-718x.dpatch
 -- Marc Deslauriers <email address hidden>   Tue, 07 Oct 2014 14:26:26 -0400

Available diffs

Superseded in vivid-release
Obsolete in utopic-release
Deleted in utopic-proposed (Reason: moved to release)
bash (4.3-11ubuntu1) utopic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release)
bash (4.3-10ubuntu1) utopic; urgency=medium

  * Merge with Debian; remaining changes:
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases.
    - etc.bash.bashrc:
      - Add sudo hint.

Available diffs

Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release)
bash (4.3-9ubuntu4) utopic; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access
    - debian/patches/CVE-2014-718x.diff: guard against overflow and fix
      off-by-one in parse.y and y.tab.c.
    - CVE-2014-7186
    - CVE-2014-7187
  * SECURITY IMPROVEMENT: use prefixes and suffixes for function exports
    - debian/patches/variables-affix.diff: add prefixes and suffixes in
      variables.c.
 -- Marc Deslauriers <email address hidden>   Sat, 27 Sep 2014 05:20:35 -0400

Available diffs

Superseded in precise-updates
Superseded in precise-security
bash (4.2-2ubuntu2.5) precise-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access
    - debian/patches/CVE-2014-718x.diff: guard against overflow and fix
      off-by-one in bash/parse.y.
    - CVE-2014-7186
    - CVE-2014-7187
  * SECURITY IMPROVEMENT: use prefixes and suffixes for function exports
    - debian/patches/variables-affix.diff: add prefixes and suffixes in
      bash/variables.c.
 -- Marc Deslauriers <email address hidden>   Fri, 26 Sep 2014 13:27:53 -0400

Available diffs

Superseded in trusty-updates
Superseded in trusty-security
bash (4.3-7ubuntu1.4) trusty-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access
    - debian/patches/CVE-2014-718x.diff: guard against overflow and fix
      off-by-one in parse.y and y.tab.c.
    - CVE-2014-7186
    - CVE-2014-7187
  * SECURITY IMPROVEMENT: use prefixes and suffixes for function exports
    - debian/patches/variables-affix.diff: add prefixes and suffixes in
      variables.c.
 -- Marc Deslauriers <email address hidden>   Fri, 26 Sep 2014 12:57:19 -0400

Available diffs

Superseded in lucid-updates
Superseded in lucid-security
bash (4.1-2ubuntu3.4) lucid-security; urgency=medium

  * SECURITY UPDATE: out-of-bounds memory access
    - debian/patches/CVE-2014-718x.dpatch: guard against overflow and fix
      off-by-one in parse.y.
    - CVE-2014-7186
    - CVE-2014-7187
  * SECURITY IMPROVEMENT: use prefixes and suffixes for function exports
    - debian/patches/variables-affix.dpatch: add prefixes and suffixes in
      variables.c.
  * debian/rules: added new patches to list.
 -- Marc Deslauriers <email address hidden>   Fri, 26 Sep 2014 13:30:27 -0400

Available diffs

Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release)
bash (4.3-9ubuntu3) utopic; urgency=medium

  * SECURITY UPDATE: incomplete fix for CVE-2014-6271 (LP: #1373781)
    - debian/patches/CVE-2014-7169.diff: fix logic in parse.y and y.tab.c.
    - CVE-2014-7169
 -- Marc Deslauriers <email address hidden>   Thu, 25 Sep 2014 21:43:10 -0400

Available diffs

Superseded in trusty-updates
Superseded in trusty-security
bash (4.3-7ubuntu1.3) trusty-security; urgency=medium

  * Updated debian/patches/CVE-2014-7169.diff to also patch y.tab.c in
    case it doesn't get regenerated when built (LP: #1374207)
 -- Marc Deslauriers <email address hidden>   Thu, 25 Sep 2014 21:20:03 -0400

Available diffs

Superseded in lucid-updates
Superseded in lucid-security
bash (4.1-2ubuntu3.2) lucid-security; urgency=medium

  * SECURITY UPDATE: incomplete fix for CVE-2014-6271
    - debian/patches/CVE-2014-7169.dpatch: fix logic in parse.y.
    - debian/rules: added new patch to list.
    - CVE-2014-7169
 -- Marc Deslauriers <email address hidden>   Thu, 25 Sep 2014 02:17:30 -0400
Superseded in trusty-updates
Superseded in trusty-security
bash (4.3-7ubuntu1.2) trusty-security; urgency=medium

  * SECURITY UPDATE: incomplete fix for CVE-2014-6271
    - debian/patches/CVE-2014-7169.diff: fix logic in parse.y.
    - CVE-2014-7169
 -- Marc Deslauriers <email address hidden>   Thu, 25 Sep 2014 02:06:49 -0400
Superseded in precise-updates
Superseded in precise-security
bash (4.2-2ubuntu2.3) precise-security; urgency=medium

  * SECURITY UPDATE: incomplete fix for CVE-2014-6271
    - debian/patches/CVE-2014-7169.diff: fix logic in bash/parse.y.
    - CVE-2014-7169
 -- Marc Deslauriers <email address hidden>   Thu, 25 Sep 2014 02:11:10 -0400
Superseded in utopic-release
Deleted in utopic-proposed (Reason: moved to release)
bash (4.3-9ubuntu2) utopic; urgency=medium

  * SECURITY UPDATE: incorrect function parsing
    - debian/patches/CVE-2014-6271.diff: fix function parsing in
      builtins/common.h, builtins/evalstring.c, subst.c, variables.c.
    - CVE-2014-6271
 -- Marc Deslauriers <email address hidden>   Mon, 22 Sep 2014 15:21:42 -0400
Superseded in trusty-updates
Superseded in trusty-security
bash (4.3-7ubuntu1.1) trusty-security; urgency=medium

  * SECURITY UPDATE: incorrect function parsing
    - debian/patches/CVE-2014-6271.diff: fix function parsing in
      builtins/common.h, builtins/evalstring.c, subst.c, variables.c.
    - CVE-2014-6271
 -- Marc Deslauriers <email address hidden>   Mon, 22 Sep 2014 15:26:16 -0400
Superseded in precise-updates
Superseded in precise-security
bash (4.2-2ubuntu2.2) precise-security; urgency=medium

  * SECURITY UPDATE: incorrect function parsing
    - debian/patches/CVE-2014-6271.diff: fix function parsing in
      bash/builtins/common.h, bash/builtins/evalstring.c, bash/variables.c.
    - CVE-2014-6271
 -- Marc Deslauriers <email address hidden>   Mon, 22 Sep 2014 15:31:07 -0400
Superseded in lucid-updates
Superseded in lucid-security
bash (4.1-2ubuntu3.1) lucid-security; urgency=medium

  * SECURITY UPDATE: incorrect function parsing
    - debian/patches/CVE-2014-6271.dpatch: fix function parsing in
      builtins/common.h, builtins/evalstring.c, variables.c.
    - debian/rules: added new patch to list.
    - CVE-2014-6271
 -- Marc Deslauriers <email address hidden>   Mon, 22 Sep 2014 15:41:59 -0400
175 of 152 results