[Coreutils-announce] fileutils-4.1.7 released

[Jim Meyering]

Thanks to Wojciech Purczynski for the detailed report
of the problem with rm.

FYI, here's the note from README-alpha:

  At least one more change is probably coming soon (after 4.1.7).
  It relates to how mv interacts with various rename implementations
  when a source directory operand is specified with a trailing slash.
  Similarly, when a source argument is a symlink to a directory and it
  is specified with a trailing slash.

------------------

  ftp://alpha.gnu.org/gnu/fetish/fileutils-4.1.7.tar.gz   (2.4 MB)
  ftp://alpha.gnu.org/gnu/fetish/fileutils-4.1.7.tar.bz2  (1.6 MB)
  http://fetish.sf.net/fileutils-4.1.7.tar.gz   (2.4 MB)
  http://fetish.sf.net/fileutils-4.1.7.tar.bz2  (1.6 MB)

And here are xdelta-style diffs

  ftp://alpha.gnu.org/gnu/fetish/fileutils-4.1.6-4.1.7.xdelta   (788 KB)
  http://fetish.sf.net/fileutils-4.1.6-4.1.7.xdelta   (788 KB)

Here are the MD5 and SHA1 signatures:

06d35a0de6e777eb98227f6892a559bf  fileutils-4.1.7.tar.gz
d95401bdbcaa3d2e17d8107d18ae1916  fileutils-4.1.7.tar.bz2
0baaa763ab6e558138cad825bd2048b4  fileutils-4.1.6-4.1.7.xdelta
31c3b6cbd36ffc2edee2dfd2000dcdacd9e31719  fileutils-4.1.7.tar.gz
94c7979d3ce64f62bde4e677282b338a1bfada72  fileutils-4.1.7.tar.bz2
b0ff0f2aa05a35a695a86a656ea7655a667f0b69  fileutils-4.1.6-4.1.7.xdelta

NEWS:
* rm: close a hole that would allow a running rm process to be subverted

ChangeLog entries:

**********************************************************************
ChangeLog       2002/03/10 22:25:01     1.1479
**********************************************************************
2002-03-10  Jim Meyering  <address@hidden>

        * Version 4.1.7.

        * src/ln.c (main): Change wording in diagnostic.
        * src/cp.c (do_copy): Likewise.
        * src/install.c (strip): Likewise.
        Suggestions from Santiago Vila.

        * Use autoconf-2.53.  Regenerate dependent files.

        * Makefile.maint (GZIP, BZIP2): Remove definitions.
        ($(my_distdir).tar.bz2): Remove rule.  Now, it's built by `make dist'.

        * configure.ac (AM_INIT_AUTOMAKE): Specify the required version
        of automake (1.6), and options (gnits dist-bzip2), rather than...
        * Makefile.am (AUTOMAKE_OPTIONS): ...here.  Remove definition.

        * src/copy.c (copy_reg): Don't exit upon finding a replaced file.
        Instead, just skip it like the diagnostic says.
        Reported by Paul Eggert.

2002-03-09  Paul Eggert  <address@hidden>

        * src/copy.c (copy_reg): Use a more concise diagnostic for
        reporting replaced files.  This avoids a bug in the code,
        which mishandled ino_t wider than long.
        * src/remove.c (remove_dir): Likewise, twice.

2002-03-09  Jim Meyering  <address@hidden>

        * Makefile.am (EXTRA_DIST): Remove config/config.rpath,
        now that automake knows about it.

2002-03-08  Jim Meyering  <address@hidden>

        Don't allow a malicious user to trick another user's rm process into
        removing unintended files.  In one scenario, if root is removing a
        hierarchy that is writable by the malicious user, that user may trick
        root into removing all of `/'.  Reported by Wojciech Purczynski.

        * src/remove.c (remove_dir): After chdir `..', call lstat to get the
        dev/inode of "." and fail if they aren't the same as the old numbers.
        (remove_cwd_entries): New parameter, `cwd_dev_ino'.
        (remove_dir): Likewise.
        (rm): Likewise.
        Adjust all callers.
        * src/mv.c (do_move): The first time we resort to copy/remove,
        call lstat `.' to get the device/inode numbers now required for rm.
        * src/rm.c (main): Call lstat `.' to get the device/inode numbers
        now required for rm.
        * src/remove.h (struct dev_ino): Declare new type.
        (rm): Add a parameter to the prototype.

2002-03-06  Jim Meyering  <address@hidden>

        * Use automake-1.6.  Regenerate dependent files.

2002-03-05  Jim Meyering  <address@hidden>

        * Makefile.am (EXTRA_DIST): Add config/config.rpath.

2002-03-04  Jim Meyering  <address@hidden>

        * Makefile.maint (tgz-size): Also handle a suffix of `K', since
        the sizes in the output of `du -h' now look like `29K'


**********************************************************************
doc/ChangeLog   2002/03/06 08:56:50     1.37
**********************************************************************
2002-03-05  Paul Eggert  <address@hidden>

        * coreutils.texi (cut invocation): Say that selected input is
        written in the same order that it is read, and is written
        exactly once.


**********************************************************************
lib/ChangeLog   2002/03/10 22:26:35     1.340
**********************************************************************
2002-03-10  Jim Meyering  <address@hidden>

        * makepath.c (make_path): Remove a comma from a diagnostic.
        Suggestion from Santiago Vila.

2002-03-08  Jim Meyering  <address@hidden>

        * rename.c: Mention that this wrapper is needed also on
        mips-dec-ultrix4.4 systems.


**********************************************************************
po/ChangeLog    2002/03/10 10:34:49     1.12
**********************************************************************
2002-03-10  Jim Meyering  <address@hidden>

        * Makefile.in.in (gmsgfmt_cmd): New variable.
        (.po.gmo): Use it here.

        * Makefile.in.in (.po.mo): Don't create target directly --
        otherwise a failed gmsgfmt command would leave a corrupt,
        yet up-to-date, .mo file.
        (.po.gmo): Likewise.

2002-03-05  Jim Meyering  <address@hidden>

        * LINGUAS: Add this file for real.
        Add zh_TW.