Re: [bug-diffutils] I'd like to release 3.3

[Jim Meyering]

Jim Meyering wrote:

> Denis Excoffier wrote:
>> Hello,
>>
>> On the 2013-03-22 05:42, Jim Meyering wrote:
>>
>>> Hello,
>>>
>>> I want to release diffutils-3.3, primarily to make it so
>>> the latest release is not susceptible to CVE-2012-3386.
>>>
>>> Here's the current state of NEWS:
>>>
>>>  ** New features
>>>
>>>    --new-file (-N) and --unidirectional-new-file now allow comparisons to 
>>> "-".
>>>    A standard input that's closed acts like a nonexistent file.
>>>
>>>    A file name containing spaces, double quotes, backslashes or control
>>>    characters is now encoded in a diff header as a double-quoted C string
>>>    literal.  The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v and
>>>    \ooo (a three-digit octal number between 0 and 255) are used.
>> Please mention the new --no-dereference option, for which i also suggest to
>> add a shortopt('K'). Thanks.
>>
>> See also 
>> http://lists.gnu.org/archive/html/bug-gnu-utils/2009-03/msg00070.html
>
> Thank your for noting that.
> That definitely should have been mentioned in 3.3's announcement.
> Unfortunately, I released it a few hours before learning
> of this omission.
>
> However, we should still fix it in the NEWS file.
> Care to write the patch?  If you do, note that you'll
> want to run "make update-NEWS-hash" before committing,
> otherwise, "make syntax-check" will complain that you've
> modified normally-immutable NEWS from a prior release.

FYI,

>From a1a17d10ccaf4602442833e05f46eb30bdf8df7e Mon Sep 17 00:00:00 2001
From: Jim Meyering <address@hidden>
Date: Sat, 30 Mar 2013 12:50:27 -0700
Subject: [PATCH] doc: mention new option, --no-dereference in 3.3's NEWS

* NEWS (New feeatures): Update 3.3's news to mention --no-dereference.
Reported by Denis Excoffier.
* Makefile.am (old_NEWS_hash): Update, since this modifies old, and
normally-immutable NEWS.
---
 NEWS   | 4 ++++
 cfg.mk | 2 +-
 2 files changed, 5 insertions(+), 1 deletion(-)

diff --git a/NEWS b/NEWS
index ef73e2f..f759dcd 100644
--- a/NEWS
+++ b/NEWS
@@ -7,6 +7,10 @@ GNU diffutils NEWS                                    -*- 
outline -*-

 ** New features

+  diff's new option, --no-dereference, allows comparison of symbolic link
+  strings.  With this option, two symbolic links compare equal when they have
+  the same value, even when that value does not reference a readable file.
+
   --new-file (-N) and --unidirectional-new-file now allow comparisons to "-".
   A standard input that's closed acts like a nonexistent file.

diff --git a/cfg.mk b/cfg.mk
index 1db88cf..c7b91d7 100644
--- a/cfg.mk
+++ b/cfg.mk
@@ -29,7 +29,7 @@ bootstrap-tools = autoconf,automake,gnulib
 # Now that we have better tests, make this the default.
 export VERBOSE = yes

-old_NEWS_hash = 1d1b7468264850b366b1138bd78e5520
+old_NEWS_hash = b42f8c496010f42c09240f19b56269fa

 # Tell maint.mk's syntax-check rules that diff gets config.h directly or
 # via diff.h or system.h.
--
1.8.2.135.g7b592fa