Format: 1.8 Date: Tue, 07 Oct 2014 10:50:12 -0400 Source: bash Binary: bash bash-static bash-builtins bash-doc Architecture: source Version: 4.3-7ubuntu1.5 Distribution: trusty-security Urgency: medium Maintainer: Ubuntu Developers Changed-By: Marc Deslauriers Description: bash - GNU Bourne Again SHell bash-builtins - Bash loadable builtins - headers & examples bash-doc - Documentation and examples for the The GNU Bourne Again SHell bash-static - GNU Bourne Again SHell (static version) Changes: bash (4.3-7ubuntu1.5) trusty-security; urgency=medium . * SECURITY UPDATE: incorrect function definition parsing with here-document delimited by end-of-file - debian/patches/CVE-2014-6277.diff: properly handle closing delimiter in copy_cmd.c, make_cmd.c. - CVE-2014-6277 * SECURITY UPDATE: incorrect function definition parsing via nested command substitutions - debian/patches/CVE-2014-6278.diff: properly handle certain parsing attempts in builtins/evalstring.c, parse.y, shell.h, y.tab.c. - CVE-2014-6278 * Updated patches with official upstream versions: - debian/patches/CVE-2014-6271.diff - debian/patches/CVE-2014-7169.diff - debian/patches/variables-affix.diff - debian/patches/CVE-2014-718x.diff Checksums-Sha1: e3a186df4bf09d1bb89f949ebce1ffe53b604775 2259 bash_4.3-7ubuntu1.5.dsc 04775cbc2028a35c90cb141b42f66fdecd4fecc3 97906 bash_4.3-7ubuntu1.5.debian.tar.gz Checksums-Sha256: c24e9ea41fa706ff657de58f9232d6db823bff7e56b2d55062f458bcdcb20914 2259 bash_4.3-7ubuntu1.5.dsc 6cd025d14f7ad1accef69602acebdadb79b4b0a332c97da200be61978920c7d6 97906 bash_4.3-7ubuntu1.5.debian.tar.gz Files: c7939fa5aeb88cb4c655288b4039b245 2259 base required bash_4.3-7ubuntu1.5.dsc 5c4514abb413f9d151ad60e9ab56265f 97906 base required bash_4.3-7ubuntu1.5.debian.tar.gz Original-Maintainer: Matthias Klose