CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

shells/bash 5.3.20

GNU Project's Bourne Again SHell

Maintainer
ehaupt@FreeBSD.org
Packages
latest: 5.3.20
Upstream
up to date
Last update
to 5.3.20 · 5c05bb2f2a
Quarterly
2026Q4: 5.3.20
Formerly
shells/bash-devel until 2014-03-03, shells/bash3 until 2004-08-11
WWW
https://www.gnu.org/software/bash/
Links
cgit · VuXML

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.3.20.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (330)

Emanuel Haupt (ehaupt) · 5.3.20
shells/bash: Update to 5.3.20
5c05bb2f2a
Piotr Kubaj (pkubaj) · 5.3.15
shells/bash: fix build on powerpc64le/CURRENT

Clang crashes with the default -mcpu, but builds with -O0:
Assertion failed: (Subtarget->hasP9Vector() && "XSCMPUQP requires Power9 Vector"), function SelectCC, file /usr/src/contrib/llvm-project/llvm/lib/Target/PowerPC/PPCISelDAGToDAG.cpp, line 4271.
f7721e48cb
Emanuel Haupt (ehaupt) · 5.3.15
shells/bash: Update to 5.3.15
ad096bc729
Emanuel Haupt (ehaupt) · 5.3.12
shells/bash: Update to 5.3.12
845f03e0ac
Emanuel Haupt (ehaupt) · 5.3.9
shells/bash: Update to 5.3.9
f77f497167
Emanuel Haupt (ehaupt) · 5.3.8_1
shells/bash: Reintroduce PORTS_READLINE

Now that readline has been updated to 8.3, the option to use the library from
ports rather than the bundled version can be restored. The option remains
disabled by default to avoid unexpected build or runtime changes for users
and to maintain consistency with previous releases.

PR:		288208
336bb48b75
Emanuel Haupt (ehaupt) · 5.3.8
shells/bash: Update to 5.3.8
c76178d6ed
Emanuel Haupt (ehaupt) · 5.3.3_2
shells/bash: Fix documentation bug

Point to ${PREFIX}/etc/profile instead of /etc/profile

MFH:		2025Q4
083f32ccc2
Emanuel Haupt (ehaupt) · 5.3.3_1
shells/bash: Update distinfo after upstream tarball reroll

Upstream rerolled the release tarball to include updated .gmo files.
See discussion:

https://lists.gnu.org/archive/html/bug-bash/2025-07/msg00156.html
f0a604f485
Emanuel Haupt (ehaupt) · 5.3.3
shells/bash: Update to 5.3.3
120818bc5c
Emanuel Haupt (ehaupt) · 5.3_1
shells/bash: Bump PORTREVISION after OPTIONS_DEFAULT change
6f87184eff
Michael Osipov (michaelo) · 5.3
shells/bash: Enable SYSBASHRC option by default

Approved by:	jrm (mentor),  ehaupt (maintainer)
Differential Revision:	https://reviews.freebsd.org/D51201
4376ee25ee
Emanuel Haupt (ehaupt) · 5.3
shells/bash: Update to 5.3

Changes:	https://lists.gnu.org/archive/html/bash-announce/2025-07/msg00000.html
3508799be9
Emanuel Haupt (ehaupt) · 5.2.37_1
shells/bash: Register CONFLICTS
91eb6e6ff4
Emanuel Haupt (ehaupt) · 5.2.37
shells/bash-static: Revert accidentally staged review
af1d4a12a4
Emanuel Haupt (ehaupt) · 5.2.37_1
shells/bash-static: Exclude PORTS_READLINE and NLS options with STATIC

Summary:
When building the static version of bash, runtime dependencies on
gettext-runtime and readline should not be present as the binary is
statically linked. This change excludes the PORTS_READLINE and NLS
options in the slave port to avoid unnecessary dependencies.

Differential Revision: https://reviews.freebsd.org/D49191
f8e5b5e2ce
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.37
ddd71f4562
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.32
38955084e4
Emanuel Haupt (ehaupt)
*/*: Remove GNU_CONFIGURE_MANPREFIX

After 9fd7ee1cdf6c remove GNU_CONFIGURE_MANPREFIX from my ports.
4ab6c18716
Emanuel Haupt (ehaupt)
*/*: Simply future removal of GNU_CONFIGURE_MANPREFIX

Simplify the future removal of GNU_CONFIGURE_MANPREFIX after the
manprefix migration is complete. The current placement of
GNU_CONFIGURE_MANPREFIX will not result in consecutive blank lines or
comments when lines containing GNU_CONFIGURE_MANPREFIX are removed in
batches.

Notified by:	mat
319b2de7f0
Emanuel Haupt (ehaupt)
shells/bash: Move manpages to share/man
d11724f346
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.26
9b2d8fc5db
Emanuel Haupt (ehaupt)
shells/bash: Remove unsed makeinfo use flag

Makeinfo is not actually used because, after patching, it updates the
timestamps of *.info files, preventing doc/Makefile from wanting to
regenerate bash.info.

While here, sort USES.

PR:		275439
a4bbf57894
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.21
b1f01e4e1b
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.15
c8b1d27d8a
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.12
743ef64e11
Emanuel Haupt (ehaupt)
shells/bash: Switch back to use PORTS_READLINE by default

Now that devel/readline has been updated, switch back to use
PORTS_READLINE by default.
db11f37fac
Po-Chuan Hsieh (sunpoet)
shells/bash: Fix typo in 372693913a051e16e6c79f1e22d78e0036f1575e
74b3fb646c
Po-Chuan Hsieh (sunpoet)
shells/bash: Unbreak this port after readline 8.2 update

- Add BUILD_DEPENDS to avoid the users building this port with readline 8.1.x

Approved by:	portmgr (blanket)
372693913a
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.9
1ac270f16e
Emanuel Haupt (ehaupt)
shells/bash: Improve message for PORTS_READLINE_BROKEN

PR:		266897 (based on)
85b186f4fe
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.2.2
bf725a8122
Emanuel Haupt (ehaupt) · 5.2_3
shells/bash: Revise fix when NLS is off

The fix commited in 17f1bb50e42a45dc64fc898cd9cae905d7262bda clashed
with cc83ec0f744fb159bd48303d15c09aa0c6cb38a4.

The later is a more elegant solution that doesn't require to drop
the header files from being installed.

This commit reverts changes from 17f1bb50e42a45dc64fc898cd9cae905d7262bda.
7fea2bffc6
Emanuel Haupt (ehaupt) · 5.2_2
shells/bash: fix static build

The logic in m4/strtoimax.m4 is inverted: it replaces strtoimax() if and only
if it is present and functional.

files/patch-configure avoids having to run autoreconf in the port and can be
removed once the fix has been adopted upstream.

differential Revision:  https://reviews.freebsd.org/D36849
3e147a1f59
Emanuel Haupt (ehaupt) · 5.2_1
shells/bash: Fix pkg-plist when NLS is turned off

Notified by:	bofh (via mail)
17f1bb50e4
Adam Weinberger (adamw) · 5.2
shells/bash: Fix build with NLS disabled
cc83ec0f74
Emanuel Haupt (ehaupt) · 5.2
shells/bash: Update to 5.2

Release notes:	https://lists.gnu.org/archive/html/bash-announce/2022-09/msg00000.html
34393efcc2
Stefan Eßer (se)
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se)
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner)
shells: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Adam Weinberger <adamw@FreeBSD.org>
  *  Andreas Kohn <andreas@syndrom23.de>
  *  Carlos Jacobo Puga Medina <cpm@FreeBSD.org>
  *  Cyrille.Lefevre@laposte.net
  *  Danijel Tasov <danielt@pilgerer.org>
  *  David O'Brien <obrien@NUXI.com>
  *  Emanuel Haupt <ehaupt@FreeBSD.org>
  *  Hajimu UMEMOTO <ume@FreeBSD.org>
  *  Igor Pokrovsky <ip@unixway.org>
  *  Jean-Yves Lefort <jylefort@brutele.be>
  *  Kai Wang <kaiw27@gmail.com>
  *  Martin Wilke <miwi@FreeBSD.org>
  *  Nobuhiro Yasutomi <nobu@psrc.isac.co.jp>
  *  Oliver Eikemeier
  *  Patrick Gardella <patrick@FreeBSD.org>
  *  Pawel Pekala <pawel@FreeBSD.org>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Richard Rose <freebsd-security@rikrose.net>
  *  Sean Chittenden <seanc@FreeBSD.org>
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Serhii (Sergey) Kozlov <skozlov@FreeBSD.org>
  *  Shinsuke Matsui <smatsui@karashi.org>
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Sylvio Cesar <sylvio@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  UMENO Takashi <umeno@rr.iij4u.or.jp>
  *  Vaida Bogdan
  *  Will Andrews <andrews@technologist.com>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  conrads@cox.net
  *  erich@rrnet.com
  *  gebhart@secnetix.de
  *  kirk@strauser.com
  *  mcglk@artlogix.com
  *  torstenb

With hat:	portmgr
c3cc2da090
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.1.16
296c8b3307
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.1.12
3571f3c161
Stefan Eßer (se)
*/*: Remove redundant '-[0-9]*' from CONFLICTS

The conflict checks compare the patterns first against the package
names without version (as reported by "pkg query "%n"), then - if
there was no match - agsinst the full package names including the
version (as reported by "pkg query "%n-%v").

Many CONFLICTS definitions used patterns like "bash-[0-9]*" to filter
for the bash package in any version. But that pattern is functionally
identical with just "bash".

Approved by:	portmgr (blanket)
819f25b36d
Baptiste Daroussin (bapt)
shells/bash: fix compilation after libncurses split in base

bash actually only requires libtinfo, but up to recent change in
14.0-CURRENT, libtinfo and libncurses were bundled into one single libs,
so linking only to libncurses was not a problem.

By telling bash to link to libtinfo and not to libncurses, it works on
both system where ncurses has been split and those without the split as
there is a libtinfow.so symlink to libncursesw.so on those.
cb0ed5261c
Emanuel Haupt (ehaupt)
shells/bash: Update to 5.1.8
2c57eb307f
Emanuel Haupt (ehaupt)
shells/bash:Prefix '/etc/inputrc' in bundled readline and documentation

Bundled readline now will use LOCALBASE/etc/inputrc as its ultimate
default inputrc file (instead of /etc/inputrc). This puts these ports in
line with what devel/readline has been doing recently (since 20210103).

PR:             255126
Submitted by:   olivier.freebsd@free.fr
a0fcd3d707
Mathieu Arnold (mat)
Remove # $FreeBSD$ from Makefiles.
305f148f48
Neel Chauhan (nc)
NEW PORT: shells/bashc: GNU Bourne Again shell extended with two-panel file manager

Bash Commander is a fork of GNU Bourne Again Shell. It's main feature is
a visual two-panel mode, much like Midnight Commander and other text-mode
visual shells.

WWW: https://github.com/sergev/bash-commander

Also add bashc to the CONFLICTS section of shells/bash.

PR:		253783, 253784
Submitted by:	Igor Pokrovsky <ip AT unixway DOT org>
2b01fc5e4f
Baptiste Daroussin (bapt)
Enforce using libncursesw like the rest of the ports

The whole ports tree has been enforced on libncursesw (widechar) version for a while.
With the exception of a few ports including bash.

This is even more problematic in the case of bash because it links to libreadline which is
linked to libncursesw.so
dd57d39c94
Emanuel Haupt (ehaupt)
Update to 5.1.4
890b1d3811