-
bash (4.4-2ubuntu1.1) zesty-security; urgency=medium
* SECURITY UPDATE: restricted shell bypass via use-after-free
- debian/patches/bash44-006.diff: check for negative offsets in
builtins/pushd.def.
- CVE-2016-9401
* SECURITY UPDATE: privilege escalation via path autocompletion
- debian/patches/bash44-007.diff: properly handle quotes in bashline.c,
subst.c.
- CVE-2017-5932
-- Marc Deslauriers <email address hidden> Tue, 16 May 2017 07:35:02 -0400
-
bash (4.4-2ubuntu1) zesty; urgency=medium
* Merge with Debian; remaining changes:
- skel.bashrc:
- Run lesspipe.
- Enable ls aliases.
- Set options in ll alias to -alF.
- Define an alert alias.
- Enabled colored grep aliases.
- etc.bash.bashrc:
- Add sudo hint.
bash (4.4-2) unstable; urgency=medium
* Apply upstream patches 001 - 005.
- Closes: #844299, LP: #1641832.
* Don't build with PIE. Closes: #842037.
-- Matthias Klose <email address hidden> Tue, 15 Nov 2016 20:06:17 +0100
-
bash (4.4-1ubuntu1) zesty; urgency=medium
* Merge with Debian; remaining changes:
- skel.bashrc:
- Run lesspipe.
- Enable ls aliases.
- Set options in ll alias to -alF.
- Define an alert alias.
- Enabled colored grep aliases.
- etc.bash.bashrc:
- Add sudo hint.
bash (4.4-1) unstable; urgency=medium
* Bash 4.4 release.
bash (4.4~rc2-1) experimental; urgency=medium
* Bash 4.4 release candidate 2.
bash (4.4~rc1+b2-1) experimental; urgency=medium
* New upstream tarball, called "4.4 beta2".
bash (4.4~rc1-1) experimental; urgency=medium
* Bash 4.4 release candidate 1.
bash (4.4~beta-1) experimental; urgency=medium
* Bash 4.4 beta release.
-- Matthias Klose <email address hidden> Wed, 02 Nov 2016 17:04:27 +0100
-
bash (4.3-15ubuntu1) yakkety; urgency=medium
* Merge with Debian; remaining changes:
- skel.bashrc:
- Run lesspipe.
- Enable ls aliases.
- Set options in ll alias to -alF.
- Define an alert alias.
- Enabled colored grep aliases.
- etc.bash.bashrc:
- Add sudo hint.
bash (4.3-15) unstable; urgency=medium
* Apply upstream patches 043 - 046. Fixes:
- When the lastpipe option is enabled, the last component can contain
nested pipelines and cause a segmentation fault under
certain circumestances.
- A typo prevents the `compat42' shopt option from working as intended.
- If a file open attempted as part of a redirection fails because it is
interrupted by a signal, the shell needs to process any pending traps
to allow the redirection to be canceled.
- An incorrect conversion from an indexed to associative array can result
in a core dump.
* Add $HOME/.local/bin to PATH, and add the user's home directories
unconditionally to the path, so that they are available without
a new login. Closes: #820856, LP: #1588562.
-- Matthias Klose <email address hidden> Fri, 24 Jun 2016 09:16:03 +0200