[Bug 1377295] Re: Please merge mksh 50d-1 (main) from Debian sid (main)

Wed Oct 29 13:29:30 UTC 2014

This bug was fixed in the package mksh - 50d-3ubuntu1

---------------
mksh (50d-3ubuntu1) vivid; urgency=high

  * Merge from Debian (LP: #1377295), remaining changes:
    - Omit dietlibc builds on Ubuntu, where it is not in main
    - Maintainer change for Ubuntu

mksh (50d-3) unstable; urgency=high

  * QA upload.
  * Update to CVS HEAD, the freeze is nearing, and this is better
    than the previous upload already anyway:
    - [tg] Add more tests detailing behaviour difference from GNU bash
    - [tg] Introduce a memory leak for x=<< fixing use of freed memory
      instead, bug tracked as LP#1380389 still live
    - [tg] Add x+=<< parallel to x=<<
    - [tg, ormaaj, jilles] POSIX “command” loses builtin special-ness
    - [tg] Begin fixing LP#1381965 and LP#1381993 (more field splitting)
  * Urgency again high because of POSIX compliance bugfixes (last two)

mksh (50d-2) unstable; urgency=high

  * QA upload.
  * Apply patch from LP#1381965

mksh (50d-1) unstable; urgency=high

  * QA upload.
  * New upstream regression bugfix release:
    - [Goodbox] Fix NULL pointer dereference on “unset x; nameref x”
    - [tg] Fix severe regression in field splitting (LP#1378208)
    - [tg] Add a warning about not using tainted user input (including
      from the environment) in arithmetics, until Stéphane writes it up
  * Enable klibc builds on arm64 and ppc64el
  * Disable LTO build, it is still too unreliable
  * Orphan the package.

mksh (50c-1) unstable; urgency=high

  * New upstream security release:
    - [tg] Know more rare signals when generating sys_signame[] replacement
    - [tg] OpenBSD sync (mostly RCSID only)
    - [tg] Document HISTSIZE limit; found by luigi_345 on IRC
    - [zacts] Fix link to Debian .mkshrc
    - [tg] Cease exporting $RANDOM (Debian #760857)
    - [tg] Fix C99 compatibility
    - [tg] Work around klibc bug causing a coredump (Debian #763842)
    - [tg] Use [197]issetugid(2) as additional check if we are FPRIVILEGED
    - [tg] SECURITY: do not permit += from environment
    - [tg] Fix more field splitting bugs reported by Stephane Chazelas and
      mikeserv; document current status wrt. ambiguous ones as testcases too
  * Policy 3.9.6, no changes
  * Use klibc on x32 again, to be binNMUable, and since it works good enough
  * Update lintian overrides

mksh (50b-1) unstable; urgency=high

  * Bring back accidentally lost changelog entry for version 49-2
  * Note what was actually imported from CVS in the 50-4 changelog
  * Disable klibc builds on x32 for now, they’re essentially amd64
  * New upstream version; remaining change:
    - [tg, Jb_boin] Relax overzealous nameref RHS checks
  * Update /etc/skel/.mkshrc with example how to force UTF-8
  * Fix gitweb URL in README.Debian
  * Urgency high due to script regression since 50-1
  * Add NEWS entry for mksh script language changes in 50-1
 -- Thorsten Glaser <tg at mirbsd.de>   Wed, 29 Oct 2014 12:28:42 +0000

** Changed in: mksh (Ubuntu)
       Status: New => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Sponsors Team, which is subscribed to the bug report.
https://bugs.launchpad.net/bugs/1377295

Title:
  Please merge mksh 50d-1 (main) from Debian sid (main)

Status in “mksh” package in Ubuntu:
  Fix Released

Bug description:
  Binary package hint: mksh, pdksh

  Hi!

  Please merge the latest mksh version from Debian sid (it’s going into
  testing → jessie RSN, too, and I plan to backport it as well; I’m the
  Debian maintainer as well as upstream).

  I’ll attach a debdiff against Debian and one against the last Ubuntu
  version.

  Thanks!

  The new changelog entries are:

  mksh (50c-1) unstable; urgency=high

    * New upstream security release:
      - [tg] Know more rare signals when generating sys_signame[] replacement
      - [tg] OpenBSD sync (mostly RCSID only)
      - [tg] Document HISTSIZE limit; found by luigi_345 on IRC
      - [zacts] Fix link to Debian .mkshrc
      - [tg] Cease exporting $RANDOM (Debian #760857)
      - [tg] Fix C99 compatibility
      - [tg] Work around klibc bug causing a coredump (Debian #763842)
      - [tg] Use [197]issetugid(2) as additional check if we are FPRIVILEGED
      - [tg] SECURITY: do not permit += from environment
      - [tg] Fix more field splitting bugs reported by Stephane Chazelas and
        mikeserv; document current status wrt. ambiguous ones as testcases too
    * Policy 3.9.6, no changes
    * Use klibc on x32 again, to be binNMUable, and since it works good enough
    * Update lintian overrides

   -- Thorsten Glaser <tg at mirbsd.de>  Fri, 03 Oct 2014 18:56:34 +0000

  mksh (50b-1) unstable; urgency=high

    * Bring back accidentally lost changelog entry for version 49-2
    * Note what was actually imported from CVS in the 50-4 changelog
    * Disable klibc builds on x32 for now, they’re essentially amd64
    * New upstream version; remaining change:
      - [tg, Jb_boin] Relax overzealous nameref RHS checks
    * Update /etc/skel/.mkshrc with example how to force UTF-8
    * Fix gitweb URL in README.Debian
    * Urgency high due to script regression since 50-1
    * Add NEWS entry for mksh script language changes in 50-1

   -- Thorsten Glaser <tg at mirbsd.de>  Wed, 03 Sep 2014 22:30:55 +0200

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/mksh/+bug/1377295/+subscriptions