CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

shells/bash 5.3.20

GNU Project's Bourne Again SHell

Port info

Maintainer
ehaupt@FreeBSD.org
Packages
latest: 5.3.20
Upstream
up to date
Last update
to 5.3.20 · 5c05bb2f2a
Quarterly
2026Q4: 5.3.20
Formerly
shells/bash-devel until 2014-03-03, shells/bash3 until 2004-08-11
WWW
https://www.gnu.org/software/bash/
Links
cgit · VuXML

Install

Package
# pkg install bash
installs 5.3.20 from latest; from quarterly (2026Q4) 5.3.20
Port
# cd /usr/ports/shells/bash && make install clean
# make -C /usr/ports/shells/bash config  # change options first
Size
1.9 MiB download · 9.9 MiB installed
Depends on
devel/gettext-runtime 1.0_1, print/indexinfo 0.3.1_1
License
GPLv3+
Options
4 of 8 on in the package: DOCS HELP NLS SYSBASHRC
Show the 4 options that are off
FDESCFS PORTS_READLINE STATIC SYSLOG

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.3.205.3.20–
FreeBSD 155.3.205.3.20–
FreeBSD 145.3.205.3.205.3.20

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.3.205.3.20–
FreeBSD 145.3.205.3.205.3.20

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.3.20.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (330)

Emanuel Haupt (ehaupt)
Update to 4.3.33
f10f721657
Tijl Coosemans (tijl)
Bump PORTREVISION on shells that use gettext to force a package rebuild and reinstall.  This should make the shells link with libintl.so.8 instead of libintl.so.9 and should give package users a better chance of having a working shell when something went wrong with the gettext update.
43271b33ff
Emanuel Haupt (ehaupt)
Update to 4.3.30
718c6f6753
Bryan Drewery (bdrewery)
- Update to patchlevel 4.3.29.

This addresses the local crash from CVE-2014-6277. Note that
  the fixes applied in 4.3.25_2 (and upstream 4.3.27) already made
  this non-exploitable remotely.

  This makes 'bashcheck' [1] fully green now. It had a soft warning
  before for CVE-2014-6277.

[1] https://github.com/hannob/bashcheck
83874e3067
Bryan Drewery (bdrewery)
- Update to patchlevel 28 which fixes issues that were mostly addressed   already in r369684.
e603aaff02
Bryan Drewery (bdrewery)
Add RedHat's patch for CVE-2014-7186, commonly known as "redir_stack" overflow, which has not been shown to be as critical as "shellshock" currently.

Security:	CVE-2014-7186
207cf37bd3
Bryan Drewery (bdrewery)
- Update to patchlevel 27 which changes how functions are exported.   This should eliminate the recent vulnerabilities, but keep the   requirement for --import-functions/IMPORTFUNCTIONS option for now. - Loosen the --import-functions requirement so it is not needed when running   an interactive shell. It is already disallowed for privileged/setuid mode. - Show an error on stderr when an imported f
62f9f87a4d
Bryan Drewery (bdrewery)
Update to patchlevel 26. This is a NOP as r369261 already covered it.
92e9f2e7d5
Bryan Drewery (bdrewery)
Disable function importing from the environment by default.  This can be enabled by using --import-functions or enabling the IMPORTFUNCTIONS option.

This removes the risk of further parser bugs leading to code execution, as
well as the risk to setuid scripts and poorly written applications that
do not cleanse their environment [1][2].

Also note that there is an unofficial 4.3.26 floating around that has not yet
been officially released.  r369261 covers the change in 4.3.26.

See also:
  http://seclists.org/oss-sec/2014/q3/747 [1]
  http://seclists.org/oss-sec/2014/q3/746 [2]
  http://seclists.org/oss-sec/2014/q3/755 [3]

Obtained from:	NetBSD (based on) [3]
PR:		193932
Reviewed by:	Eric Vangyzen
With hat:	portmgr
8f93c11473
Bryan Drewery (bdrewery)
Fix CVE-2014-3659. The original fix in 25 was not enough.

Obtained from:	http://seclists.org/oss-sec/2014/q3/690 (bash developer)
Security:	CVE-2014-3659
627de1b0d7
Emanuel Haupt (ehaupt)
- Update to patch level 25 (4.3.25) - Provide CPE information [1]

Provided by:    des
Notified by:	Chet Ramey <chet.ramey@case.edu>
0fc68c9cab
Emanuel Haupt (ehaupt)
- Update to 4.3.24 - Don't attempt to remove directories owned by a dependency
979faff7c1
Emanuel Haupt (ehaupt)
Update to 4.3.22
30a7459d83
Baptiste Daroussin (bapt)
Fix build without texinfo in base
663ea54e10
Baptiste Daroussin (bapt)
Add an @shell keyword to handle adding and remove a shell path in /etc/shell Bump port revision of all ports that were doing it wrong prior to the keyword

CR:		D208
Reviewed by:	antoine
With hat:	portmgr
2bacde9c3b
Emanuel Haupt (ehaupt)
- Update to 4.3.18 - Port is sound enough to parallel build [1]

PR:		189207 [1]
Submitted by:	Jia-Shiun Li <jiashiun@gmail.com> [1]
677578d389
Baptiste Daroussin (bapt)
Convert all :U to :tu and :L to :tl

Since FreeBSD 8.4 and FreeBSD 9.1 make(1) do support :tu and :tl as a
replacement for :U and :L (which has been marked as deprecated)

bmake which is the default on FreeBSD 10+ only support by default
:tu/:tl a hack has been added at the time to support :U and :L to ease
migration. This hack is now not necessary anymore

Note that this makes the ports tree incompatible with make(1) from
FreeBSD 8.3 or earlier

With hat:	portmgr
4a4ec28d37
Emanuel Haupt (ehaupt)
bash does NOT require procfs mounted.
8dd26c8f51
Emanuel Haupt (ehaupt)
Add an install message about the fact that fdescfs has to be present.

Discussed on:	ports@, amd64@
2c9bbf1dd0
Emanuel Haupt (ehaupt)
Update to 4.3.11
67c1d0f16e
Emanuel Haupt (ehaupt)
Update to 4.3.8
7bb20d28c7
Emanuel Haupt (ehaupt) · 4.3.0_1
Now that we're at patchlevel 0 the current PORTVERSION definition has the effect that we're at version "4.3.". Set PORTVERSION to 4.3.${PATCHLEVEL} until we have the first patch released upstream. Also bump PORTREVISION to make sure all port tools deal with this correctly.

Notified by:	"Matthew D. Fuller" <fullermd@over-yonder.net>
Discussed with:	kwm
c998374291
Emanuel Haupt (ehaupt)
More indentation fixes, sorry for the noise.
a376a4c368
Emanuel Haupt (ehaupt)
Fix attribution (overwritten by previous merge)

Notified by:    kwm
be2efef113
Emanuel Haupt (ehaupt)
- Reset maintainer of shells/bash, shells/bash-static - Takeover maintainership - Merge changes from shells/bash-devel this updates the port to 4.3 - Remove the now useless -devel ports - Document change in ports/MOVED

Approved by:    portmgr (bapt)
03edf9b7fc
Emanuel Haupt (ehaupt) · as shells/bash-devel
Update to 4.3 and also do a major Makefile cleanup by using new OPTIONS helper.

PR:		187206
Submitted by:	adamw
21a227e459
Emanuel Haupt (ehaupt) · as shells/bash-devel
Now that this port is staged and DOCS defined we can stop testing for DOCS in any install target.
db3abf847a
Baptiste Daroussin (bapt)
Fix properties on pkg-plist
e04b632220
Baptiste Daroussin (bapt)
Fix inconsistency in building bash

Ensure the configure script always activate the same features wether or not
fdescfs is mounted: Always consider /dev/fd as absent
Bump portrevision as packages on the cluster are built with fdescfs mounted.

With hat:	portmgr
Reported:	Derek Schrock (skered- via #poudriere)
3454307094
Mathieu Arnold (mat)
- Support staging

maintainer timeout.
PR:		ports/183196
Submitted by:	mat
56df0506f2
Baptiste Daroussin (bapt)
Add NO_STAGE all over the place in preparation for the staging support (cat: shells)
f6e6105ff8
Martin Wilke (miwi)
- Update to patchlevel 45 -

Requested by:	many
75e6c1ee72
Baptiste Daroussin (bapt)
Fix bash-static slave ports with bash being now using new options framework
ef5b0dd161
Baptiste Daroussin (bapt)
Convert to new options framework This fixes build with nls not correctly pulling in libintl given USES= gettext was set after pre.mk which is forbidden
8afe451198
Marcus von Appen (mva)
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig and   USE_GETTEXT=yes to USES=gettext while here
95e7081976
Baptiste Daroussin (bapt) · as shells/bash-devel
Fix typo in options checking

Reported by:	bdrewery
Approved by:	portmgr (implicit)
With hat:	portmgr
b9ceedf099
Emanuel Haupt (ehaupt) · as shells/bash-devel
Move USES prior to bsd.port.pre.mk otherwise the port won't build.
70eea78a2d
Baptiste Daroussin (bapt)
Move USES prior to bsd.port.pre.mk in preparation of the move of the USES load
e52752145c
Baptiste Daroussin (bapt)
Convert USE_BISON to USES= bison

It brings bison as a build dependency in case it is set the following way:
USES= bison or USES= bison:build

it brings bison as a run dependency in case it is set the following way:
USES= bison:run

it brings bison both as a run and build dependency in case it the set the following way:
USES= bison:both

While here trim some headers
Convert some USE_GNOME= gnomehack to USES= pathfix
9250d94365
David E. O'Brien (obrien)
Update to Bash 4.2 patchlevel 42.

* If a backslash-newline (which is removed) with no other input is given as
  input to `read', the shell tries to dereference a null pointer and seg faults.

* Under certain circumstances, bash attempts to expand variables in
  arithmetic expressions even when evaluation is being suppressed.

* Output redirection applied to builtin commands missed I/O errors if
  they happened when the file descriptor was closed, rather than on write
  (e.g., like with an out-of-space error on a remote NFS file system).

* Process substitution incorrectly inherited a flag that inhibited using
  the (local) temporary environment for variable lookups if it was providing
  the filename to a redirection.  The intent the flag is to enforce the
  POSIX command expansion ordering rules.
22ae009ed5
Emanuel Haupt (ehaupt) · as shells/bash-devel
- Always use bundled FAQ file, it's the same as the one externally fetched - therefore get rid of discouraged IGNOREFILES - Use default SYSLOG definition - Remove unused WITHOUT_NLS variable assignment - Indentation - Adjust options description - Do not install help files, those are meant for translation. Change HELP   option to either einable or disable builtin help where default is enabled [1] -

Reviewed by:    ak [1]
48dc914249
Emanuel Haupt (ehaupt) · as shells/bash-devel
Use pre-defined knob for the static build option (STATIC_BASH -> STATIC).
778a3def11
Emanuel Haupt (ehaupt)
Register CONFLICTS
df9706b895
Emanuel Haupt (ehaupt) · as shells/bash-devel
Add shells/bash-devel. The goal of this port is to have a more up to date version of shells/bash.

This port has also been converted to use OPTIONSng.
46a134caae