CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

shells/bash 5.3.20

GNU Project's Bourne Again SHell

Port info

Maintainer
ehaupt@FreeBSD.org
Packages
latest: 5.3.20
Upstream
up to date
Last update
to 5.3.20 · 5c05bb2f2a
Quarterly
2026Q4: 5.3.20
Formerly
shells/bash-devel until 2014-03-03, shells/bash3 until 2004-08-11
WWW
https://www.gnu.org/software/bash/
Links
cgit · VuXML · Report wrong data

Install

Package
# pkg install bash
installs 5.3.20 from latest; from quarterly (2026Q4) 5.3.20
Port
# cd /usr/ports/shells/bash && make install clean
# make -C /usr/ports/shells/bash config  # change options first
Size
1.9 MiB download · 9.9 MiB installed
Depends on
devel/gettext-runtime 1.0_1, print/indexinfo 0.3.1_1
License
GPLv3+
Options
4 of 8 on in the package: DOCS HELP NLS SYSBASHRC
Show the 4 options that are off
FDESCFS PORTS_READLINE STATIC SYSLOG

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 165.3.205.3.20–
FreeBSD 155.3.205.3.20–
FreeBSD 145.3.205.3.205.3.20

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 155.3.205.3.20–
FreeBSD 145.3.205.3.205.3.20

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 5.3.20.

Fixed (3)

Show 3 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (330)

David E. O'Brien (obrien)
Update to Bash 4.2 patchlevel 37.

PR:		170283
Submitted by:	Bryan Drewery <bryan@shatow.net>
51881237b8
David E. O'Brien (obrien)
Update to Bash 4.2 patchlevel 28.
5cf03bbdc4
David E. O'Brien (obrien)
Force a package cluster rebuild.
270ea2ece5
David E. O'Brien (obrien)
The UK now has their own .mo
414ab7e8fc
David E. O'Brien (obrien)
Update version 4.2 to patchlevel 24.
a27f893e98
Martin Wilke (miwi)
- Fix build

With hat:	portmgr
6ac5444031
David E. O'Brien (obrien)
Update to version 4.2 PL 20.
82e5900cea
Dmitry Marakasov (amdmi3)
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
David E. O'Brien (obrien)
Update to Bash 4.1 patchlevel 11.

Under certain circumstances, running `fc -l' two times in succession
  with a relative history offset at the end of the history will result
  in an incorrect calculation of the last history entry and a seg fault

PR:	160239
792f9af6d1
David E. O'Brien (obrien)
Add option to log user history to syslog.

PR:		155780
Submitted by:	Alexander Kriventsov <avk@vl.ru>
bf7ad139d5
David E. O'Brien (obrien)
Update to Bash 4.1 patchlevel 10.
2159e26025
Martin Wilke (miwi)
- Get Rid MD5 support

With hat:	portmgr (myself)
65e190c0f0
David E. O'Brien (obrien)
Update to Bash 4.1 patchlevel 9.
9e909fc921
David E. O'Brien (obrien)
Add OPTIONS processing.
9f82a80526
Emanuel Haupt (ehaupt)
- Remove iconv dependency if WITHOUT_NLS is defined - Bump PORTREVISION

PR:             149981
Submitted by:   Jeremy Chadwick <freebsd@jdc.parodius.com> (via ports)
Approved by:    obrien (maintainer-timeout; 14 days)
135815e4ab
Emanuel Haupt (ehaupt)
- Depend on libiconv in order to fix package installation - Bump PORTREVISION

PR:		147747, 148329, 149218
Submitted by:	Alex Goncharov <alex-goncharov@comcast.net>,
		Garrett Wollman <wollman@khavrinen.csail.mit.edu>
		yar
Approved by:	obrien (maintainer timeout; > 50 days)
9f049e5f9f
Emanuel Haupt (ehaupt)
Update to 4.1.7

PR:		147172
Approved by:	obrien (maintainer timeout; > 14 days)
df6564ce3d
Ade Lovett (ade)
Bump PORTREVISION after gettext update - not sure how this one was missed.

Submitted by:	Herbert J. Skuhra <h.skuhra (at) gmail.com>
6fab7cbdf3
Emanuel Haupt (ehaupt)
- Fix statically linked version - Bump PORTREVISION

Approved by:	portmgr (miwi)
a04231de18
Ion-Mihai Tetcu (itetcu)
Fix plist

Submitted by:	QAT
Approved by:	portmgr (self, to get lots of gnome building)
2ea5333d67
David E. O'Brien (obrien)
Update to Bash 4.1 patchlevel 5.
85e35f68f5
Emanuel Haupt (ehaupt)
Update to patchlevel 35

PR:		140179
Approved by:	maintainer timeout (14 days)
a4634d0487
Christian Weisgerber (naddy)
Pass the -y flag to bison to fix $() parsing. Plain "bison -d parse.y" outputs parse.tab.c instead of y.tab.c, so y.tab.c is never regenerated, and the parser fix from patch 001 is effectively not applied.

PR:		139720
Approved by:	maintainer timeout (4+2 weeks)
dd2862d85b
Emanuel Haupt (ehaupt)
Register CONFLICTS
fbb80c4908
Martin Wilke (miwi)
- Update to 4.0.33

PR:		137294
Submitted by:	bf <bf1783@gmail.com>
Approved by:	obrien (maintainer timeout)
Feature safe:	yes
54b255ea4a
David E. O'Brien (obrien)
Update to Bash 4.0 patchlevel 24.
131f625395
David E. O'Brien (obrien)
Update to patchlevel 17.
b41e87d0b0
David E. O'Brien (obrien)
Set MAKE_JOBS_UNSAFE. Philip reports he sees a race condition as it fails 3 of 8 tries.

Submitted by:   pgollucci
d5ed9eca5a
David E. O'Brien (obrien)
Use Bison in the build instead of byacc. This fixes the issue of '$()' (for ``) not being parsed correctly.

PR:		101230
Submitted by:	bf2006a@yahoo.com
80321f0d0e
Sergey A. Osokin (osa)
Fix pkg-plist. Bump PORTREVISION.

Approved by:	pav@ (portmgr)
e16c77d271
David E. O'Brien (obrien)
Now that the build break is quickly dealt with, update the description and conflicts.
ebfea16aaf
David E. O'Brien (obrien)
Blah^2.  Now DISTNAME is wrong.  But yay! patches are here.  So now all the patch logic won't get in the way.
69ce1c6372
David E. O'Brien (obrien) · 4.0
Fix nit in version number.
f2fde45612
David E. O'Brien (obrien)
Update to 4.0 PL0.
2f6ee01948
David E. O'Brien (obrien)
Add ports conflicts between bash{,-static}.

Submitted by:	ehaupt
ed9fb09680
David E. O'Brien (obrien)
Update 3.2 to patchlevel 48.
2ce2f6fc79
Rong-En Fan (rafan)
Update CONFIGURE_ARGS for how we pass CONFIGURE_TARGET to configure script. Specifically, newer autoconf (> 2.13) has different semantic of the configure target. In short, one should use --build=CONFIGURE_TARGET instead of CONFIGURE_TARGET directly. Otherwise, you will get a warning and the old semantic may be removed in later autoconf releases.

To workaround this issue, many ports hack the CONFIGURE_TARGET variable
so that it contains the ``--build='' prefix.

To solve this issue, under the fact that some ports still have
configure script generated by the old autoconf, we use runtime detection
in the do-configure target so that the proper argument can be used.

Changes to Mk/*:
 - Add runtime detection magic in bsd.port.mk
 - Remove CONFIGURE_TARGET hack in various bsd.*.mk
 - USE_GNOME=gnometarget is now an no-op

Changes to individual ports, other than removing the CONFIGURE_TARGET hack:

= pkg-plist changed (due to the ugly CONFIGURE_TARGET prefix in * executables)
  - comms/gnuradio
  - science/abinit
  - science/elmer-fem
  - science/elmer-matc
  - science/elmer-meshgen2d
  - science/elmerfront
  - science/elmerpost

= use x86_64 as ARCH
  - devel/g-wrap

= other changes
  - print/magicfilter
    GNU_CONFIGURE -> HAS_CONFIGURE since it's not generated by autoconf

Total # of ports modified:  1,027
Total # of ports affected: ~7,000 (set GNU_CONFIGURE to yes)

PR:		126524 (obsoletes 52917)
Submitted by:	rafan
Tested on:	two pointyhat 7-amd64 exp runs (by pav)
Approved by:	portmgr (pav)
741aa71483
Edwin Groothuis (edwin)
Bump portrevision due to upgrade of devel/gettext.

The affected ports are the ones with gettext as a run-dependency
according to ports/INDEX-7 (5007 of them) and the ones with USE_GETTEXT
in Makefile (29 of them).

PR:             ports/124340
Submitted by:   edwin@
Approved by:    portmgr (pav)
090059a210
David E. O'Brien (obrien)
Update to Bash 3.2 patchlevel 39. PR: 123326 Submitted by: bf2006a@yahoo.com
0158af4c88
Martin Wilke (miwi)
- Remove unneeded dependency from gtk12/gtk20 [1] - Remove USE_XLIB/USE_X_PREFIX/USE_XPM in favor of USE_XORG - Remove X11BASE support in favor of LOCALBASE or PREFIX - Use USE_LDCONFIG instead of INSTALLS_SHLIB - Remove unneeded USE_GCC 3.4+

Thanks to all Helpers:
	Dmitry Marakasov, Chess Griffin, beech@, dinoex, rafan, gahr,
	ehaupt, nox, itetcu, flz, pav

PR:		116263
Tested on:	pointyhat
Approved by:	portmgr (pav)
3e4ed01146
David E. O'Brien (obrien)
Update to patchlevel 33. PR:		118728 Submitted by:	bf <bf2006a@yahoo.com>
6c68b8f39d
David E. O'Brien (obrien)
Update to Bash 3.2 patchlevel 25.

PR:	116272
85ef9b0739
Gabor Kovesdan (gabor)
- Remove the DESTDIR modifications from individual ports as we have a new,   fully chrooted DESTDIR, which does not need such any more.

Sponsored by:	Google Summer of Code 2007
Approved by:	portmgr (pav)
42542fb076
David E. O'Brien (obrien)
dd 'cklatest' target.
812bdd6875
David E. O'Brien (obrien)
Remove 'ru' entries - they are already in mtree/BSD.local.dist

Submitted by:	sat
691c2c20bc
David E. O'Brien (obrien)
Slightly cleaner PREFIX=/ handling.
112e1f3008
David E. O'Brien (obrien)
Support PREFIX=/

PR:		95566
Submitted by:	Andrew McNaughton <andrew@scoop.co.nz>
cacc031ebc
David E. O'Brien (obrien)
Add rbash.

PR:		104040
Submitted by:	Jeremy Chadwick <freebsd@jdc.parodius.com>
abe6aac47f
David E. O'Brien (obrien)
Add missing dirrmtry entries.

PR:		112159
Submitted by:	rafan
adda6e8768
Pav Lucistnik (pav)
- Fix plist

With hat:	portmgr
3a33358cbf