[pkgsrc/pkgsrc-2016Q4]: pkgsrc/shells/bash Pullup ticket #5219 - requested by...

[bsiegert <bsiegert%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/543da2103e24
branches:  pkgsrc-2016Q4
changeset: 408754:543da2103e24
user:      bsiegert <bsiegert%pkgsrc.org@localhost>
date:      Wed Mar 01 16:23:10 2017 +0000

description:
Pullup ticket #5219 - requested by spz
shells/bash: security fix

Revisions pulled up:
- shells/bash/Makefile                                          1.80
- shells/bash/distinfo                                          1.46

---
   Module Name:    pkgsrc
   Committed By:   maya
   Date:           Sun Jan 22 21:52:05 UTC 2017

   Modified Files:
           pkgsrc/shells/bash: Makefile distinfo

   Log Message:
   bash: update to patchlevel 11.
   changes:

   patch 06:
   Out-of-range negative offsets to popd can cause the shell to crash attempting
   to free an invalid memory block.

   patch 07:
   When performing filename completion, bash dequotes the directory name being
   completed, which can result in match failures and potential unwanted
   expansion.

   patch 08:
   Under certain circumstances, bash will evaluate arithmetic expressions as
   part of reading an expression token even when evaluation is suppressed. This
   happens while evaluating a conditional expression and skipping over the
   failed branch of the expression.

   patch 09:
   Depending on compiler optimizations and behavior, the `read' builtin may not
   save partial input when a timeout occurs.

   patch 10:
   Depending on compiler optimizations and behavior, the `read' builtin may not
   save partial input when a timeout occurs.

   patch 11:
   Subshells begun to run command and process substitutions may attempt to
   set the terminal's process group to an incorrect value if they receive
   a fatal signal.  This depends on the behavior of the process that starts
   the shell.

diffstat:

 shells/bash/Makefile |   8 ++++----
 shells/bash/distinfo |  26 +++++++++++++++++++++++++-
 2 files changed, 29 insertions(+), 5 deletions(-)

diffs (64 lines):

diff -r d89c74b2b44f -r 543da2103e24 shells/bash/Makefile
--- a/shells/bash/Makefile      Mon Feb 27 11:22:50 2017 +0000
+++ b/shells/bash/Makefile      Wed Mar 01 16:23:10 2017 +0000
@@ -1,7 +1,7 @@
-# $NetBSD: Makefile,v 1.78 2016/11/20 08:02:26 wen Exp $
+# $NetBSD: Makefile,v 1.78.2.1 2017/03/01 16:23:10 bsiegert Exp $
 
 BASH_VERSION=          4.4
-BASH_PATCHLEVEL=       005
+BASH_PATCHLEVEL=       011
 
 DISTNAME=      bash-${BASH_VERSION}
 PKGNAME=       bash-${BASH_VERSION}.${BASH_PATCHLEVEL}
@@ -11,8 +11,8 @@
 
 PATCH_SITES=   ${MASTER_SITES:=bash-4.4-patches/}
 PATCHFILES+=   bash44-001 bash44-002 bash44-003 bash44-004 bash44-005
-#PATCHFILES+=  bash43-006 bash43-007 bash43-008 bash43-009 bash43-010
-#PATCHFILES+=  bash43-011 bash43-012 bash43-013 bash43-014 bash43-015
+PATCHFILES+=   bash44-006 bash44-007 bash44-008 bash44-009 bash44-010
+PATCHFILES+=   bash44-011 #bash43-012 bash43-013 bash43-014 bash43-015
 #PATCHFILES+=  bash43-016 bash43-017 bash43-018 bash43-019 bash43-020
 #PATCHFILES+=  bash43-021 bash43-022 bash43-023 bash43-024 bash43-025
 #PATCHFILES+=  bash43-026 bash43-027 bash43-028 bash43-029 bash43-030
diff -r d89c74b2b44f -r 543da2103e24 shells/bash/distinfo
--- a/shells/bash/distinfo      Mon Feb 27 11:22:50 2017 +0000
+++ b/shells/bash/distinfo      Wed Mar 01 16:23:10 2017 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.45 2016/11/20 08:02:26 wen Exp $
+$NetBSD: distinfo,v 1.45.2.1 2017/03/01 16:23:10 bsiegert Exp $
 
 SHA1 (bash-4.4.tar.gz) = 8de012df1e4f3e91f571c3eb8ec45b43d7c747eb
 RMD160 (bash-4.4.tar.gz) = 48869b3a460007d05c02ef99745477b2e526fdec
@@ -24,6 +24,30 @@
 RMD160 (bash44-005) = e899f89c49cd2b905191041ea06b642546865982
 SHA512 (bash44-005) = 7546a6c90c8e8508567dde713722291477ca87c1116905b46432514a4fc632840a855b84f102591914cd4c44d5bf2eb7400866e26366fc94525fb401ea844a8f
 Size (bash44-005) = 1439 bytes
+SHA1 (bash44-006) = 59d9e79adb1fc35e086caa0fa2af49381fe8b2f5
+RMD160 (bash44-006) = 6924afd21adc108a37350f2b3c36d4f7e0159423
+SHA512 (bash44-006) = 5edcd76cf97bfe289f71924ba279ff48a1167eb3cc36f811cbcc23732746f5c821d1d39d4b137b7d99d57809a4b7270a54f4a41176fcfde0708bf92ddc68b77f
+Size (bash44-006) = 1805 bytes
+SHA1 (bash44-007) = 8924cde74fbb4fafeaf0ff6b5e4e94fcd2c2b98a
+RMD160 (bash44-007) = 270ab48ad0c7dcf9bc2a0856c1eeb5b89819a3ce
+SHA512 (bash44-007) = 386c019debee414697abc648d9a77894e842bb0b7a2a71709e8b3398582f25065e68963405fa22fb77439c6b431ee94a2ecbb16734c2436af3dfb4d1b5f06fcf
+Size (bash44-007) = 4640 bytes
+SHA1 (bash44-008) = b38e9df20869643ef9388cbab585610a20ccc847
+RMD160 (bash44-008) = f9634425241188bb2ec79b1212d2e76dbfdd4592
+SHA512 (bash44-008) = d9a8924f1c9263deab89153bb688a87f211913ebd72c8077e607db6fdddc7e5af05042dd22a9a2df593e518ea74b54ca79d20afc796e47d871827a2556e233d0
+Size (bash44-008) = 2223 bytes
+SHA1 (bash44-009) = 4bd44109ff79f0d6da19c27948dc40db9598da85
+RMD160 (bash44-009) = 4beb1212b56e82dc005f1026852aa5564f7eeafe
+SHA512 (bash44-009) = 3b01c080cf4a54658679b36c282a69a9ac48b900b19ceb42dbaf084abd395d50e5ff14db90a7fdf0c9856dad150897dca561160686c931634765782447fc076e
+Size (bash44-009) = 3117 bytes
+SHA1 (bash44-010) = 31180db58d25591f0744fc6923df1f8a97f0d19b
+RMD160 (bash44-010) = a2f825a27b5c9854cb6b3cd9cc9e386ea7517222
+SHA512 (bash44-010) = 54ff556b62fd88381e7a495db50957b016474973b3a566661c65b649a40960f2d3355221b3a71fb292128aad92a45d73d9816d63833bc416b4d15acdef391b98
+Size (bash44-010) = 1670 bytes
+SHA1 (bash44-011) = 240c287dc60cb69185a2a05b1341bfceafd1071a
+RMD160 (bash44-011) = 63587fcb788ceced48dfd455c55868bb058ee647
+SHA512 (bash44-011) = 6b5b068b74978fc691749ccff5e094c768047f702430e97114f5bf342f078696f7d7616d0642d4061b062e9112dfe00a1c2309c65de4147e0e98fb52c593d844
+Size (bash44-011) = 1603 bytes
 SHA1 (patch-af) = e26e3209902247263884cfebc11a2f7e43245062
 SHA1 (patch-ag) = cd3b151e3bb045d2bb609c0a03d7d3df2c871f47
 SHA1 (patch-aj) = 2e4c15afd9b50d44967ee8e1f85bdc908c0eeeb0