coreutils-8.19 released (fixes sort -u data loss bugs)

Jim Meyering <[email protected]> Mon, 20 Aug 2012 10:16:26 +0200
Newsgroups gmane.comp.gnu.coreutils.announce,gmane.comp.gnu.coreutils.general
Message-ID <[email protected]>
--=-=-=
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable

This is to announce coreutils-8.19, a stable release.

There have been 13 commits by 4 people in the 8 days since 8.18.

This release is primarily to fix two data loss bugs in sort -u.
See the NEWS below for a brief summary.

Thanks to everyone who has contributed!
The following people contributed changes to this release:

  Bernhard Voelker (1)
  Jim Meyering (9)
  Krzysztof Goj (1)
  Paul Eggert (2)

Special thanks to Rasmus Borup Hansen for reporting the sort -u problem
along with a reproducer, and to Paul Eggert for spotting the second bug
and for his minimal patch that fixed both bugs.

Jim [on behalf of the coreutils maintainers]
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D

Here is the GNU coreutils home page:
    http://gnu.org/s/coreutils/

For a summary of changes and contributors, see:
  http://git.sv.gnu.org/gitweb/?p=3Dcoreutils.git;a=3Dshortlog;h=3Dv8.19
or run this command from a git-cloned coreutils directory:
  git shortlog v8.18..v8.19

To summarize the 9 gnulib-related changes, run these commands
From=20a git-cloned coreutils directory:
  git checkout v8.19
  git submodule summary v8.18

Here are the compressed sources and a GPG detached signature[*]:
  http://ftp.gnu.org/gnu/coreutils/coreutils-8.19.tar.xz
  http://ftp.gnu.org/gnu/coreutils/coreutils-8.19.tar.xz.sig

Use a mirror for higher download bandwidth:
  http://ftpmirror.gnu.org/coreutils/coreutils-8.19.tar.xz
  http://ftpmirror.gnu.org/coreutils/coreutils-8.19.tar.xz.sig

[*] Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify coreutils-8.19.tar.xz.sig

If that command fails because you don't have the required public key,
then run this command to import it:

  gpg --keyserver keys.gnupg.net --recv-keys 7FD9FCCB000BEEEE

and rerun the 'gpg --verify' command.

This release was bootstrapped with the following tools:
  Autoconf 2.69.19-1bb10
  Automake 1.12a
  Gnulib v0.0-7581-gbc33a8a
  Bison 2.6.2.837-8dfc

NEWS

* Noteworthy changes in release 8.19 (2012-08-20) [stable]

** Bug fixes

  df now fails when the list of mounted file systems (/etc/mtab) cannot
  be read, yet the file system type information is needed to process
  certain options like -a, -l, -t and -x.
  [This bug was present in "the beginning".]

  sort -u could fail to output one or more result lines.
  For example, this command would fail to print "1":
  (yes 7 | head -11; echo 1) | sort --p=3D1 -S32b -u
  [bug introduced in coreutils-8.6]

  sort -u could read freed memory.
  For example, this evokes a read from freed memory:
  perl -le 'print "a\n"."0"x900'|valgrind sort --p=3D1 -S32b -u > /dev/null
  [bug introduced in coreutils-8.6]

** New features

  rm now accepts the --dir (-d) option which makes it remove empty director=
ies.
  This improves compatibility with Mac OS X and BSD systems which also honor
  the -d option.

=2D----
also posted as: https://savannah.gnu.org/forum/forum.php?forum_id=3D7342

--=-=-=
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.19 (GNU/Linux)
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=R708
-----END PGP SIGNATURE-----
--=-=-=--