Announcing the release of GNU findutils 4.5.6b

[James Youngman]

I am pleased to announce the release of version 4.5.6b of GNU
findutils.

GNU findutils is a set of software tools for finding files that match
certain criteria and for performing various operations on them.
Findutils includes the programs "find", "xargs" and "locate".  More
information about findutils is available at
http://www.gnu.org/software/findutils/.

This is a "development" release of findutils.  It can be downloaded from
ftp://alpha.gnu.org/gnu/findutils.  The 4.5.x release series is
intended to allow people to try out, comment on or contribute to new
features of findutils.  During the 4.5.x release series some features
may be introduced and then changed or removed as a result of feedback
or experience.  In short, please don't rely on backward compatibility
later in the release series.

While this is a development release, it is tested before being
released, principally with the regression test suite (run "make check"
to use it).  The Savannah website
(http://savannah.gnu.org/bugs/?group=findutils) contains a current
list of known bugs in findutils (for both the stable and development
branches).

Bugs in GNU findutils should be reported to the findutils bug tracker
at http://savannah.gnu.org/bugs/?group=findutils.  Reporting bugs via
the web interface will ensure that you are automatically informed when
the bug has been fixed.  General discussion of findutils takes place
on the bug-findutils mailing list.  To join the 'bug-findutils'
mailing list, send email to <address@hidden>.

To verify the GPG signature of the release, you will need the public
key of the findutils maintainer, James Youngman.  You can download
this from http://savannah.gnu.org/users/jay.  Please note that the key
being used is not the same as the key that was used to sign previous
releases.

Release 4.5.6b is a replacement for 4.5.6, which has never been
available by FTP, because of a bug CVE-2009-4029 (see
<http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-4029> for
details).  It wasn't possible to simply provide a changed 4.5.6
release, because among other things I didn't want to rewind the master
branch on the git repository.


* Major changes in release 4.5.6b, 2010-03-30

This is a replacement release for 4.5.6, which is not available by FTP
since it contains Makefiles which are vulnerable to CVE-2009-4029.

* Major changes in release 4.5.6, 2010-03-30

** Functional Enhancements to find

patch #4848: Patch - Support for SELinux

** Bug Fixes

#28872: Mistake in "#safer" example in "Problems with -exec and
        filenames" section of the Texinfo manual.

#28824: Corrected error message for "-ctime x".
        Likewise for -gid, -inum, -links, -mmin, -cmin, -amin,
        -uid, -used, -atime, -mtime, -ctime.

#27975: Infinite loop for -exec [..] {} +.

#27846: Assertion failure in xargs.c on AIX.

#27375: Open file descriptors leak into child processes.

#27017: find -D opt / -fstype ext3 -print , -quit coredumps

#27328: segfault if the initial exec for "find -exec" fails.

#27017: find -D opt / -fstype ext3 -print , -quit coredumps.

#26868: compilation error in pred.c on Solaris x86_64

#24873: Duplicate fprint option corrupts output

#23920: warn about un-matchable -path arguments ending in /.

#19120: Patch to fix single quotes in man page find(1)

** Documentation Changes

#26327: xargs man page is vague about the number of times command is executed.


--
James Youngman <address@hidden>
GNU findutils maintainer