bash-3.2-32.AXS3

エラータID: AXSA:2011-274:01

Release date: 
Friday, July 29, 2011 - 12:20
Subject: 
bash-3.2-32.AXS3
Affected Channels: 
Asianux Server 3 for x86
Asianux Server 3 for x86_64
Severity: 
High
Description: 

The GNU Bourne Again shell (Bash) is a shell or command language interpreter that is compatible with the Bourne shell (sh). Bash incorporates useful features from the Korn shell (ksh) and the C shell (csh). Most sh scripts can be run by bash without modification. This package (bash) contains bash version 3.2, which improves POSIX compliance over previous versions.
Security issues fixed with this release:
CVE-2008-5374
bash-doc 3.2 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/cb#####.? temporary file, related to the (1) aliasconv.sh, (2) aliasconv.bash, and (3) cshtobash scripts.
Fixed bugs:
- Bash would sometimes abort scripts that assigned read-only variables when using the source at . . This has been fixed.
- If the prompt contained a character that cannot beviewed and and , the prompt would jump to an unexpected position when using auto-completion (with the tab key). This has been fixed.
- When bash attempted to interpret the NOBITS .dynamic section of the ELF header, it would result in a ^D: bad ELF interpreter: No such file or directory message. This has been fixed.
- The $RANDOM variable now generates a new random number for each use.
- When running a shell script with an embedded null character, Bash source builtin parsed the script incorrectly. This has been fixed.
- Updated the man page for trap with mentions that signals ignored upon entry cannot be listed later.
- Text that is more than one line now displays correctly when resizing the terminal window.
- bash would display Broken pipe for builtins like echo and printf when output did not succeed due to EPIPE. This was incorrect and has been fixed.
- in vi-mode, inserts with the repeat function were not possible. This has been fixed.
- Fixed auto-complete behavior: bash does not append / anymore to files, only to directories.
- fixed a memory leak in the read builtin.
- removed the unusable and unbuildable source files from /usr/share/doc/bash-3.2/loadables in the bash package.
Enhancements:
- The system-wide /etc/bash.bash_logout bash logout file is now enabled.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

Asianux Server 3 for x86
  1. bash-3.2-32.AXS3.i386.rpm
    MD5: 277b0a9b01958f7532e0a90c403dee7d
    SHA-256: 89d6395b3305a038d9f5678e976951515af68a27b2b9250250bdc6e2b9c48586
    Size: 1.80 MB

Asianux Server 3 for x86_64
  1. bash-3.2-32.AXS3.x86_64.rpm
    MD5: 615898aec340501861add962c5490696
    SHA-256: 87e558798c78a158021ad128d78c20177132bfee813a1c407530f0c3b8ab90ce
    Size: 1.82 MB