Update to 4.3.33f10f721657
bash -- out-of-bounds memory access in parserentered 2014-10-01
GNU Project's Bourne Again SHell
# pkg install bashinstalls 5.3.20 from latest; from quarterly (2026Q4) 5.3.20# cd /usr/ports/shells/bash && make install clean# make -C /usr/ports/shells/bash config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 5.3.20 | 5.3.20 | – |
| FreeBSD 15 | 5.3.20 | 5.3.20 | – |
| FreeBSD 14 | 5.3.20 | 5.3.20 | 5.3.20 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 5.3.20 | 5.3.20 | – |
| FreeBSD 14 | 5.3.20 | 5.3.20 | 5.3.20 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 5.3.20.Update to 4.3.33f10f721657
Bump PORTREVISION on shells that use gettext to force a package rebuild and reinstall. This should make the shells link with libintl.so.8 instead of libintl.so.9 and should give package users a better chance of having a working shell when something went wrong with the gettext update.43271b33ff
Update to 4.3.30718c6f6753
- Update to patchlevel 4.3.29. This addresses the local crash from CVE-2014-6277. Note that the fixes applied in 4.3.25_2 (and upstream 4.3.27) already made this non-exploitable remotely. This makes 'bashcheck' [1] fully green now. It had a soft warning before for CVE-2014-6277. [1] https://github.com/hannob/bashcheck83874e3067
- Update to patchlevel 28 which fixes issues that were mostly addressed already in r369684.e603aaff02
Add RedHat's patch for CVE-2014-7186, commonly known as "redir_stack" overflow, which has not been shown to be as critical as "shellshock" currently. Security: CVE-2014-7186207cf37bd3
- Update to patchlevel 27 which changes how functions are exported. This should eliminate the recent vulnerabilities, but keep the requirement for --import-functions/IMPORTFUNCTIONS option for now. - Loosen the --import-functions requirement so it is not needed when running an interactive shell. It is already disallowed for privileged/setuid mode. - Show an error on stderr when an imported f62f9f87a4d
Update to patchlevel 26. This is a NOP as r369261 already covered it.92e9f2e7d5
Disable function importing from the environment by default. This can be enabled by using --import-functions or enabling the IMPORTFUNCTIONS option. This removes the risk of further parser bugs leading to code execution, as well as the risk to setuid scripts and poorly written applications that do not cleanse their environment [1][2]. Also note that there is an unofficial 4.3.26 floating around that has not yet been officially released. r369261 covers the change in 4.3.26. See also: http://seclists.org/oss-sec/2014/q3/747 [1] http://seclists.org/oss-sec/2014/q3/746 [2] http://seclists.org/oss-sec/2014/q3/755 [3] Obtained from: NetBSD (based on) [3] PR: 193932 Reviewed by: Eric Vangyzen With hat: portmgr8f93c11473
Fix CVE-2014-3659. The original fix in 25 was not enough. Obtained from: http://seclists.org/oss-sec/2014/q3/690 (bash developer) Security: CVE-2014-3659627de1b0d7
- Update to patch level 25 (4.3.25) - Provide CPE information [1] Provided by: des Notified by: Chet Ramey <chet.ramey@case.edu>0fc68c9cab
- Update to 4.3.24 - Don't attempt to remove directories owned by a dependency979faff7c1
Update to 4.3.2230a7459d83
Fix build without texinfo in base663ea54e10
Add an @shell keyword to handle adding and remove a shell path in /etc/shell Bump port revision of all ports that were doing it wrong prior to the keyword CR: D208 Reviewed by: antoine With hat: portmgr2bacde9c3b
- Update to 4.3.18 - Port is sound enough to parallel build [1] PR: 189207 [1] Submitted by: Jia-Shiun Li <jiashiun@gmail.com> [1]677578d389
Convert all :U to :tu and :L to :tl Since FreeBSD 8.4 and FreeBSD 9.1 make(1) do support :tu and :tl as a replacement for :U and :L (which has been marked as deprecated) bmake which is the default on FreeBSD 10+ only support by default :tu/:tl a hack has been added at the time to support :U and :L to ease migration. This hack is now not necessary anymore Note that this makes the ports tree incompatible with make(1) from FreeBSD 8.3 or earlier With hat: portmgr4a4ec28d37
bash does NOT require procfs mounted.8dd26c8f51
Add an install message about the fact that fdescfs has to be present. Discussed on: ports@, amd64@2c9bbf1dd0
Update to 4.3.1167c1d0f16e
Update to 4.3.87bb20d28c7
Now that we're at patchlevel 0 the current PORTVERSION definition has the effect that we're at version "4.3.". Set PORTVERSION to 4.3.${PATCHLEVEL} until we have the first patch released upstream. Also bump PORTREVISION to make sure all port tools deal with this correctly.
Notified by: "Matthew D. Fuller" <fullermd@over-yonder.net>
Discussed with: kwmc998374291More indentation fixes, sorry for the noise.a376a4c368
Fix attribution (overwritten by previous merge) Notified by: kwmbe2efef113
- Reset maintainer of shells/bash, shells/bash-static - Takeover maintainership - Merge changes from shells/bash-devel this updates the port to 4.3 - Remove the now useless -devel ports - Document change in ports/MOVED Approved by: portmgr (bapt)03edf9b7fc
Be more consistent with spacing/line wrapping.00b5642237
Update to 4.3 and also do a major Makefile cleanup by using new OPTIONS helper. PR: 187206 Submitted by: adamw21a227e459
Now that this port is staged and DOCS defined we can stop testing for DOCS in any install target.db3abf847a
Fix properties on pkg-pliste04b632220
Fix inconsistency in building bash Ensure the configure script always activate the same features wether or not fdescfs is mounted: Always consider /dev/fd as absent Bump portrevision as packages on the cluster are built with fdescfs mounted. With hat: portmgr Reported: Derek Schrock (skered- via #poudriere)3454307094
- Support staging maintainer timeout. PR: ports/183196 Submitted by: mat56df0506f2
Support staging.1d8e5e9cd6
Add NO_STAGE all over the place in preparation for the staging support (cat: shells)f6e6105ff8
- Update to patchlevel 45 - Requested by: many75e6c1ee72
Fix bash-static slave ports with bash being now using new options frameworkef5b0dd161
Convert to new options framework This fixes build with nls not correctly pulling in libintl given USES= gettext was set after pre.mk which is forbidden8afe451198
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and USE_GETTEXT=yes to USES=gettext while here95e7081976
Convert to USES=gettext79e6679346
Fix typo in options checking Reported by: bdrewery Approved by: portmgr (implicit) With hat: portmgrb9ceedf099
Move USES prior to bsd.port.pre.mk otherwise the port won't build.70eea78a2d
Move USES prior to bsd.port.pre.mk in preparation of the move of the USES loade52752145c
Update to 4.2.452c4ecfe97f
Convert USE_BISON to USES= bison It brings bison as a build dependency in case it is set the following way: USES= bison or USES= bison:build it brings bison as a run dependency in case it is set the following way: USES= bison:run it brings bison both as a run and build dependency in case it the set the following way: USES= bison:both While here trim some headers Convert some USE_GNOME= gnomehack to USES= pathfix9250d94365
Update to Bash 4.2 patchlevel 42. * If a backslash-newline (which is removed) with no other input is given as input to `read', the shell tries to dereference a null pointer and seg faults. * Under certain circumstances, bash attempts to expand variables in arithmetic expressions even when evaluation is being suppressed. * Output redirection applied to builtin commands missed I/O errors if they happened when the file descriptor was closed, rather than on write (e.g., like with an out-of-space error on a remote NFS file system). * Process substitution incorrectly inherited a flag that inhibited using the (local) temporary environment for variable lookups if it was providing the filename to a redirection. The intent the flag is to enforce the POSIX command expansion ordering rules.22ae009ed5
Add LICENSEed6b261f86
Remove two unused comments (forgotten in previous commit).531a093eba
- Always use bundled FAQ file, it's the same as the one externally fetched - therefore get rid of discouraged IGNOREFILES - Use default SYSLOG definition - Remove unused WITHOUT_NLS variable assignment - Indentation - Adjust options description - Do not install help files, those are meant for translation. Change HELP option to either einable or disable builtin help where default is enabled [1] - Reviewed by: ak [1]48dc914249
Use pre-defined knob for the static build option (STATIC_BASH -> STATIC).778a3def11
Register CONFLICTSdf9706b895
Add shells/bash-devel. The goal of this port is to have a more up to date version of shells/bash. This port has also been converted to use OPTIONSng.46a134caae