Page MenuHomeSolus

Update coreutils to 8.27, resolves CVE-2017-7476
ClosedPublic

Authored by kyrios123 on Jun 8 2017, 6:02 PM.
Tags
Referenced Files
F11054306: D357.diff
Fri, Aug 11, 12:38 AM
F10779963: D357.id755.diff
May 24 2023, 9:29 PM
F10766827: D357.id762.diff
May 19 2023, 8:39 PM
F10764662: D357.id.diff
May 19 2023, 8:35 AM
F10732010: D357.diff
May 11 2023, 10:22 AM

Details

Summary
  • Bug fixes
    • cp --parents will now set an SELinux context for created directories, as appropriate for the -a, --preseve=context, or -Z options. [bug present since SELinux support added in coreutils-6.10]
    • date again converts from a specified time zone. Previously output was not converted to the local time zone, and remained in the specified one. [bug introduced in coreutils-8.26]
    • Commands like 'cp --no-dereference -l A B' are no longer quiet no-ops when A is a regular file and B is a symbolic link that points to A. [bug introduced in fileutils-4.0]
    • factor no longer goes into an infinite loop for certain numbers like 158909489063877810457 and 222087527029934481871. [bug introduced in coreutils-8.20]
    • stat and tail now know about the "rdt" file system, which is an interface to Resource Director Technology. stat -f --format=%T now reports the file system type, and tail -f uses inotify.
    • tail no longer prints redundant file headers with interleaved inotify events, which could be triggered especially when tail was suspended and resumed. [bug introduced with inotify support added in coreutils-7.5]
    • timeout no longer has a race that may terminate the wrong process. The race is unlikely, as timeout(1) needs to receive a signal right after the command being monitored finishes. Also the system needs to have reallocated that command's pid in that short time window. [bug introduced when timeout was added in coreutils-7.0]
    • wc --bytes --files0-from now correctly reports byte counts. Previously it may have returned values that were too large, depending on the size of the first file processed. [bug introduced in coreutils-8.24]

For improvements and new features, check the
release notes

IMPORTANT: Patched for CVE-2017-7476 more info

Closes T2850

Signed-off-by: Pierre-Yves <pyu@riseup.net>

Test Plan

Successfully tried a few utils:

  • mkdir
  • ls
  • cp
  • mv
  • rm
  • rmdir
  • touch
  • uname
  • cat
  • date
  • du
  • sha256sum
  • split
  • tail
  • wc
  • whoami

Diff Detail

Repository
R559 coreutils
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

sunnyflunk retitled this revision from Update coreutils to 8.27 - CVE-2017-7476 to Update coreutils to 8.27, resolves CVE-2017-7476.
sunnyflunk edited the test plan for this revision. (Show Details)
sunnyflunk added a subscriber: sunnyflunk.

LGTM, thanks

This revision is now accepted and ready to land.Jun 9 2017, 4:46 AM
This revision was automatically updated to reflect the committed changes.