bash41-003 If command completion is attempted on a word with a quoted globbing character (e.g., `*' or `?'), bash can reference a NULL pointer and dump core. bash41-004 When running in Posix mode and executing a shell function without local variables, bash will not propagate a variable in a special builtin's temporary environment to have global scope. bash41-005 When the `read' builtin times out after the timeout specified with -t is exceeded, it does not reset the flags that tell signal handlers to process signals immediately instead of deferring their handling. This can result in unsafe functions being called from signal handlers, which can cause bash to hang or dump core. Reproducible: Always
thanks ... now in the tree