bash (4.2-2ubuntu2.3) precise-security; urgency=medium

  * SECURITY UPDATE: incomplete fix for CVE-2014-6271
    - debian/patches/CVE-2014-7169.diff: fix logic in bash/parse.y.
    - CVE-2014-7169

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Thu, 25 Sep 2014 02:11:10 -0400

bash (4.2-2ubuntu2.2) precise-security; urgency=medium

  * SECURITY UPDATE: incorrect function parsing
    - debian/patches/CVE-2014-6271.diff: fix function parsing in
      bash/builtins/common.h, bash/builtins/evalstring.c, bash/variables.c.
    - CVE-2014-6271

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 22 Sep 2014 15:31:07 -0400

bash (4.2-2ubuntu2.1) precise-proposed; urgency=low

  * Fix directory expansion. (LP: #778627)

 -- Alec Warner <antarus@google.com>  Mon, 18 Mar 2013 22:12:54 +0000

bash (4.2-2ubuntu2) precise; urgency=low

  * Really apply upstream patches 021 - 024.

 -- Matthias Klose <doko@ubuntu.com>  Tue, 03 Apr 2012 17:27:05 +0200

bash (4.2-2ubuntu1) precise; urgency=low

  * Merge with Debian; remaining changes:

 -- Matthias Klose <doko@ubuntu.com>  Mon, 02 Apr 2012 23:58:07 +0200

bash (4.2-2) unstable; urgency=low

  * Fix command-not-found location. Closes: #529313.
  * Print a replacement error message if command-not-found was removed
    after bashrc was loaded. Closes: #631023. LP: #561155.
  * skel.bashrc: Document and prepare enabling the globstar feature (Fabian
    Greffrath). Closes: #627926.
  * Apply upstream patches 021 - 024.

 -- Matthias Klose <doko@debian.org>  Fri, 30 Mar 2012 19:20:04 +0200

bash (4.2-1ubuntu3) precise; urgency=low

  * When cross-building, use the cross-strip, not the host strip.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Fri, 30 Mar 2012 23:09:19 +0000

bash (4.2-1ubuntu2) precise; urgency=low

  * Build-depend on gettext:any instead of on gettext, so that apt-get can
    properly resolve build-dependencies on the tool when cross-building.

 -- Steve Langasek <steve.langasek@ubuntu.com>  Thu, 29 Mar 2012 21:50:28 -0700

bash (4.2-1ubuntu1) precise; urgency=low

  * Merge with Debian; remaining changes:
    - Build from the upstream sources, build the documentation in info format.
    - skel.bashrc:
      - Run lesspipe.
      - Enable ls aliases.
      - Set options in ll alias to -alF.
      - Define an alert alias.
      - Enabled colored grep aliases. 
    - etc.bash.bashrc:
      - Add sudo hint.

 -- Matthias Klose <doko@ubuntu.com>  Wed, 30 Nov 2011 11:30:24 +0100

bash (4.2-1) unstable; urgency=low

  [ Matthias Klose ]
  * New upstream version.
  * Apply upstream patches 001 - 020.
  * Fix parsing of double doublequotes. LP: #780441.
  * /etc/bash.bashrc:
    - Fix quoting issue calling command-not-found. LP: #754859. Closes: #587185.
  * Don't cache the value of brk between sbrk calls (Samuel Thibault).
    Closes: #614815.
  * Remove the bashdb and bash-completion packaging rules and files.
  * Just link with libtinfo instead of libncurses if available.
  * Make lintian happy.
  * Use quilt to apply patches.
  * Fix build error with -Werror=format-security (Pierre Chifflier).
    Closes: #641350.
  * Fix build for the binary target, without calling the build target.
    Closes: #602159.
  * Fix cross builds (Steve McIntyre). Closes: #629929.

  [ Jonathan Nieder ]
  * Update copyright file. Many files that were GPL-2+ were relicensed
    under GPL-3+ in bash 4.0-rc1. Closes: #632177.
  * debian/rules: Use "rm -rf" instead of rmdir to remove usr/share/info
    directory in "with_gfdl = no" build. This prevents build failures when
    using the unmodified upstream tarball.
  * bash.preinst: Tidy up a little.
    - Remove codepath that would rename .bash_profile → .profile if .profile
      was unmodified from the gutsy → hardy transition. Closes: #602244
    - Remove commented experiment from bash-completion transition.
    - Remove misleading "dpkg --assert-support-predepends" check.
      Closes: #602456.
    - Move utility functions to a separate bash.preinst-lib.c and corresponding
      declarations to bash.preinst.h.
  * Remove /bin/sh symlink and /usr/share/man/man1/sh.1.gz from bash package
    contents. Closes: #602483.
    - debian/rules: Do not install /bin/sh and sh.1.gz symlinks.
    - bash.preinst:
      - Make sure /bin/sh is present and points to an executable, forcibly
        creating symlinks /bin/sh -> bash and /usr/share/man/man1/sh.1.gz ->
        bash.1.gz if not.
      - Divert /bin/sh and sh.1.gz on behalf of dash if we are upgrading from
        a bash version with /bin/sh in the files list and bash's copy of
        /bin/sh is not already diverted. This ensures unpacking bash will not
        cause /bin/sh to go missing.
  * bash.postinst: Simplify comment that contained an implementation detail
    about how /bin/sh is provided.
  * Use dpkg-buildflags to retrieve compiler options, including hardening flags.
    Build-Depends: dpkg-dev (>= 1.16.1) (Steve Langasek). Closes: #629929.
  * Pass --host to configure only when cross-compiling, --build always, as
    recommended in autotools documentation (Steve Langasek).

  * Merge from Ubuntu (closes: #648578):
    - /etc/skel/.bashrc:
      - Don't set HISTCONTROL twice. Thanks to Kevin Knerr. LP: #465500.
      - Set HISTFILESIZE to 2000 and HISTSIZE to 1000. LP: #544542.
      - README.Debian: Remove obsolete entry "Why is bash configured
        with --disable-net-redirections?"

 -- Matthias Klose <doko@debian.org>  Wed, 30 Nov 2011 07:29:05 +0100

# For older changelog entries, run 'apt-get changelog bash'
