Subject: Bug#1024158 closed by Debian FTP Masters <[email-masked]> (reply to Matthias Klose <[email-masked]>) (Bug#747400: fixed in bash 5.2.37-2)

From: "Debian Bug Tracking System" <[email-masked]>
Date: Wed, 09 Apr 2025 08:51:05 +0000

This is an automatic notification regarding your Bug report
which was filed against the src:bash package:

#1024158: bash: Please fix d/control pointing to ancient bazaar repository(?)

It has been closed by Debian FTP Masters <[email-masked]> (reply to Matthias Klose <[email-masked]>).

Their explanation is attached below along with your original report.
If this explanation is unsatisfactory and you have not received a
better one in a separate message then please contact Debian FTP Masters <[email-masked]> (reply to Matthias Klose <[email-masked]>) by
replying to this email.

-- 
747400: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747400
Debian Bug Tracking System
Contact [email-masked] with problems

Subject: Bug#747400: fixed in bash 5.2.37-2
From: Debian FTP Masters <[email-masked]>
To: [email-masked]
Date: Wed, 09 Apr 2025 08:49:56 +0000

Source: bash
Source-Version: 5.2.37-2
Done: Matthias Klose <[email-masked]>

We believe that the bug you reported is fixed in the latest version of
bash, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to [email-masked],
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Matthias Klose <[email-masked]> (supplier of updated bash package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email-masked])

Format: 1.8
Date: Wed, 09 Apr 2025 10:34:37 +0200
Source: bash
Architecture: source
Version: 5.2.37-2
Distribution: unstable
Urgency: medium
Maintainer: Matthias Klose <[email-masked]>
Changed-By: Matthias Klose <[email-masked]>
Closes: 747400 859264 1099719
Changes:
 bash (5.2.37-2) unstable; urgency=medium
 .
   * Remove VCS attributes. Closes: #747400, #859264, #1099719.
   * Bump standards version.
Checksums-Sha1:
 d32750d217c43dabc3b63b1d6431071e6cd506dc 2162 bash_5.2.37-2.dsc
 a1af1bbde88b868738d336b2804dbbe72cebe648 88360 bash_5.2.37-2.debian.tar.xz
 6a6c6d34bed0145b1d836ddcc0c9fe4e291c4cf2 6495 bash_5.2.37-2_source.buildinfo
Checksums-Sha256:
 7e5f6d5a26093e812f8841d5cf3245054102e86986017d8edd859417b03707f9 2162 bash_5.2.37-2.dsc
 42e03ef523258b61fa765b8c9719d7bf461f2a274260d07fbe45ca7e4627923a 88360 bash_5.2.37-2.debian.tar.xz
 718e16b5f079b7bccd76586e18b843041bf2d02542aaa1e3a04509e29b7707b0 6495 bash_5.2.37-2_source.buildinfo
Files:
 c9d75e69a27738c24a25fff61285998b 2162 base required bash_5.2.37-2.dsc
 5a87fe5e2077763dd62ad40716804954 88360 base required bash_5.2.37-2.debian.tar.xz
 eaf8968f700d84b54486c7afa5ccb30b 6495 base required bash_5.2.37-2_source.buildinfo

Subject: bash: Please fix d/control pointing to ancient bazaar repository(?)
From: наб <[email-masked]>
To: Debian Bug Tracking System <[email-masked]>
Date: Tue, 15 Nov 2022 19:12:45 +0100

Source: bash
Version: 5.2-2
Severity: normal

Dear Maintainer,

I wanted to send some patches for the packaging, but, on a freshly
apt-sourced tree, I see:
-- >8 --
nabijaczleweli@tarta:~/uwu/bash-5.2$ head debian/changelog
bash (5.2-2) unstable; urgency=medium

  * Apply upstream patches 001 - 002.
    - Expanding unset arrays in an arithmetic context can cause a
      segmentation fault.
    - Starting bash with an invalid locale specification for
      LC_ALL/LANG/LC_CTYPE can cause the shell to crash. Closes: #1021062.

 -- Matthias Klose <[email-masked]>  Mon, 24 Oct 2022 10:34:28 +0200

nabijaczleweli@tarta:~/uwu/bash-5.2$ head debian/control  -n15
Source: bash
Section: base
Priority: required
Maintainer: Matthias Klose <[email-masked]>
Standards-Version: 4.6.1
Build-Depends: autoconf, autotools-dev, bison, libncurses5-dev,
 texinfo, texi2html, debhelper (>= 11), gettext, sharutils,
 locales <!nocheck>, time <!nocheck>,
 xz-utils, dpkg-dev (>= 1.16.1)
Build-Depends-Indep: texlive-latex-base, ghostscript, texlive-fonts-recommended, man2html-base
Build-Conflicts: r-base-core
Homepage: http://tiswww.case.edu/php/chet/bash/bashtop.html
Vcs-Browser: https://code.launchpad.net/~doko/+junk/pkg-bash-debian
Vcs-Bzr: http://bazaar.launchpad.net/~doko/+junk/pkg-bash-debian
-- >8 --
and packages.d.o agrees.

After considerable trial and much error, I managed to clone the
referenced URL, where:
-- >8 --
nabijaczleweli@tarta:~/uwu/pkg-bash-debian$ bzr log | head -n20
------------------------------------------------------------
revno: 29
committer: Matthias Klose <[email-masked]>
branch nick: pkg-bash-debian
timestamp: Fri 2015-01-30 00:36:31 +0100
message:
  4.3 updates up to 4.3-12
------------------------------------------------------------
revno: 28
committer: Matthias Klose <[email-masked]>
branch nick: pkg-bash-debian
timestamp: Sat 2013-03-30 15:41:11 +0100
message:
  bash (4.2+dfsg-1) unstable; urgency=low

    * Apply upstream patches 038 - 045, fixes for
      - If a backslash-newline (which is removed) with no other input is given as
        input to `read', the shell tries to dereference a null pointer and
        segfaults.
      - Under certain circumstances, bash attempts to expand variables in
-- >8 --

Which means that this is very much not the current state of the package.
It'd be great if the d/control fields were updated to point to the
current VCS.

Thanks,
наб

-- System Information:
Debian Release: 11.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable-debug'), (500, 'stable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-19-amd64 (SMP w/24 CPU threads)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_FIRMWARE_WORKAROUND, TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE=en_GB:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

-- no debconf information