The version of ls in coreutils-6.5 had a serious bug. For example, "ls -l" would segfault when processing a file whose numeric user ID or group ID has no associated name.
As usual, details are in the ChangeLog files, but note that for changes in Gnulib-owned files (as most were, this time), the ChangeLog files are not part of this distribution. See Gnulib for those: <http://cvs.sv.gnu.org/viewcvs/gnulib/?root=gnulib>. Here are the compressed sources: ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.6.tar.gz (7.7MB) ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.6.tar.bz2 (5.2MB) Here are the xdelta-style diffs: ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.5-6.6.xdelta (104KB) Here are the GPG detached signatures[*]: ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.6.tar.gz.sig ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.6.tar.bz2.sig Here are the MD5 and SHA1 checksums: 7ec058ad7ab431966198052658819844 coreutils-6.6.tar.gz 64f1589af7d9a879c9bdc0af41e19ff1 coreutils-6.6.tar.bz2 4e1ccc0df7281342097ccc4ffa13632d coreutils-6.5-6.6.xdelta a1961cf5687c85ebcd71f703239a2ba77a5fd723 coreutils-6.6.tar.gz 9019a32b122db851eff22ace8669d7cdedf39e7b coreutils-6.6.tar.bz2 ba4bbcc4117c0173ba5f7a6cc64d8e14f63202c0 coreutils-6.5-6.6.xdelta This release was bootstrapped with Autoconf 2.61, Automake 1.10, Bison 2.3a and CVS Gnulib sources from 2006-11-22 12:10:32 UTC. [*] You can use either of the above signature files to verify that the corresponding file (without the .sig suffix) is intact. First, be sure to download both the .sig file and the corresponding tarball. Then, run a command like this: gpg --verify coreutils-6.6.tar.gz.sig If that command fails because you don't have the required public key, then run this command to import it: gpg --keyserver wwwkeys.pgp.net --recv-keys D333CBA1 and rerun the `gpg --verify' command. NEWS * Noteworthy changes in release 6.6 (2006-11-22) [stable] ** Bug fixes ls would segfault (dereference a NULL pointer) for a file with a nameless group or owner. This bug was introduced for coreutils-6.5. A bug in the latest official m4/gettext.m4 (from gettext-0.15) made configure fail to detect gettext support, due to the unusual way in which coreutils uses AM_GNU_GETTEXT. ** Improved robustness Now, du (and the other fts clients: chmod, chgrp, chown) honor a trailing slash in the name of a symlink-to-directory even on Solaris 9, by working around its buggy fstatat implementation.
pgpupuU7ApwqW.pgp
Description: PGP signature
_______________________________________________ GNU Announcement mailing list <info-gnu@gnu.org> http://lists.gnu.org/mailman/listinfo/info-gnu
