coreutils-6.7 released

[Jim Meyering]

Coreutils version 6.7 has been released.

If you haven't heard about the GNU coreutils, the FAQ is a good
place to start: <http://www.gnu.org/software/coreutils/faq/>.

There were still some significant bugs in coreutils-6.6, so this
is yet another bug-fix-only release.  For details, see the NEWS
section below.

----------------------------------------------------------------
Here are the compressed sources:
  ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.7.tar.gz   (7.7MB)
  ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.7.tar.bz2   (5.1MB)

Here are the xdelta-style diffs:
  ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.6-6.7.xdelta   (444KB)

Here are the GPG detached signatures[*]:
  ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.7.tar.gz.sig
  ftp://ftp.gnu.org/gnu/coreutils/coreutils-6.7.tar.bz2.sig

Here are the MD5 and SHA1 checksums:

bdad8bbcf15c1c1216eabcbefe0295ad  coreutils-6.7.tar.gz
a16465d0856cd011a1acc1c21040b7f4  coreutils-6.7.tar.bz2
356c3a4fca9d2fe109d4ef12cb6d854c  coreutils-6.6-6.7.xdelta
a7713aaad599f3689e9f083d6174f367ff60e2f5  coreutils-6.7.tar.gz
55a6037365f749a4ebb9e88a92132a4f938ac90e  coreutils-6.7.tar.bz2
811baf7825e165f83a34ca6db7584ac17cc4df10  coreutils-6.6-6.7.xdelta

[*] You can use either of the above signature files to verify that
the corresponding file (without the .sig suffix) is intact.  First,
be sure to download both the .sig file and the corresponding tarball.
Then, run a command like this:

  gpg --verify coreutils-6.7.tar.gz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver wwwkeys.pgp.net --recv-keys D333CBA1

and rerun the `gpg --verify' command.


*****************
How can you help?
*****************
If you're interested in lending a hand, or just want to use
the latest versions right now, you can build these programs
and run the test suite like this:

   gzip -dc coreutils-6.7.tar.gz | tar xf -
   cd coreutils-6.7
   ./configure
   make
   make -k check >& log
   grep FAIL log

Be sure to use make's -k option so that make doesn't stop
just because one of the earlier tests fails.
Please report any build problems or test failures to the
address@hidden mailing list.
There are detailed instructions in the `Reporting bugs:' section
of the README file.

For further reading, see the coreutils home page
  http://www.gnu.org/software/coreutils/
and the FAQ list:
  http://www.gnu.org/software/coreutils/faq/


*****************
NEWS
*****************
* Noteworthy changes in release 6.7 (2006-12-08) [stable]

** Bug fixes

  When cp -p copied a file with special mode bits set, the same bits
  were set on the copy even when ownership could not be preserved.
  This could result in files that were setuid to the wrong user.
  To fix this, special mode bits are now set in the copy only if its
  ownership is successfully preserved.  Similar problems were fixed
  with mv when copying across file system boundaries.  This problem
  affects all versions of coreutils through 6.6.

  cp --preserve=ownership would create output files that temporarily
  had too-generous permissions in some cases.  For example, when
  copying a file with group A and mode 644 into a group-B sticky
  directory, the output file was briefly readable by group B.
  Fix similar problems with cp options like -p that imply
  --preserve=ownership, with install -d when combined with either -o
  or -g, and with mv when copying across file system boundaries.
  This bug affects coreutils 6.0 through 6.6.

  du --one-file-system (-x) would skip subdirectories of any directory
  listed as second or subsequent command line argument.  This bug affects
  coreutils-6.4, 6.5 and 6.6.

pgpq9jaWPPbua.pgp
Description: PGP signature