Hello community, here is the log from the commit of package coreutils checked in at Mon Dec 11 01:37:40 CET 2006. -------- --- coreutils/coreutils.changes 2006-12-06 11:59:08.000000000 +0100 +++ /mounts/work_src_done/STABLE/coreutils/coreutils.changes 2006-12-11 01:37:02.000000000 +0100 @@ -1,0 +2,24 @@ +Sat Dec 9 01:00:28 CET 2006 - schwab@suse.de + +- Update to coreutils 6.7. + ** Bug fixes + When cp -p copied a file with special mode bits set, the same bits + were set on the copy even when ownership could not be preserved. + This could result in files that were setuid to the wrong user. + To fix this, special mode bits are now set in the copy only if its + ownership is successfully preserved. Similar problems were fixed + with mv when copying across file system boundaries. This problem + affects all versions of coreutils through 6.6. + cp --preserve=ownership would create output files that temporarily + had too-generous permissions in some cases. For example, when + copying a file with group A and mode 644 into a group-B sticky + directory, the output file was briefly readable by group B. + Fix similar problems with cp options like -p that imply + --preserve=ownership, with install -d when combined with either -o + or -g, and with mv when copying across file system boundaries. + This bug affects coreutils 6.0 through 6.6. + du --one-file-system (-x) would skip subdirectories of any directory + listed as second or subsequent command line argument. This bug affects + coreutils-6.4, 6.5 and 6.6. + +------------------------------------------------------------------- Old: ---- coreutils-6.6.diff coreutils-6.6.tar.bz2 New: ---- coreutils-6.7.diff coreutils-6.7.tar.bz2 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ coreutils.spec ++++++ --- /var/tmp/diff_new_pack.cEestg/_old 2006-12-11 01:37:15.000000000 +0100 +++ /var/tmp/diff_new_pack.cEestg/_new 2006-12-11 01:37:15.000000000 +0100 @@ -1,5 +1,5 @@ # -# spec file for package coreutils (Version 6.6) +# spec file for package coreutils (Version 6.7) # # Copyright (c) 2006 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine @@ -20,8 +20,8 @@ Obsoletes: libselinux <= 1.23.11-3 libselinux-32bit >= 9 libselinux-64bit = 9 libselinux-x86 = 9 Autoreqprov: on PreReq: %{install_info_prereq} -Version: 6.6 -Release: 2 +Version: 6.7 +Release: 1 Summary: GNU Core Utilities Source: coreutils-%{version}.tar.bz2 Source1: su.pamd @@ -169,6 +169,27 @@ %dir %{_prefix}/share/locale/*/LC_TIME %changelog -n coreutils +* Sat Dec 09 2006 - schwab@suse.de +- Update to coreutils 6.7. + ** Bug fixes + When cp -p copied a file with special mode bits set, the same bits + were set on the copy even when ownership could not be preserved. + This could result in files that were setuid to the wrong user. + To fix this, special mode bits are now set in the copy only if its + ownership is successfully preserved. Similar problems were fixed + with mv when copying across file system boundaries. This problem + affects all versions of coreutils through 6.6. + cp --preserve=ownership would create output files that temporarily + had too-generous permissions in some cases. For example, when + copying a file with group A and mode 644 into a group-B sticky + directory, the output file was briefly readable by group B. + Fix similar problems with cp options like -p that imply + --preserve=ownership, with install -d when combined with either -o + or -g, and with mv when copying across file system boundaries. + This bug affects coreutils 6.0 through 6.6. + du --one-file-system (-x) would skip subdirectories of any directory + listed as second or subsequent command line argument. This bug affects + coreutils-6.4, 6.5 and 6.6. * Wed Nov 22 2006 - schwab@suse.de - Update to coreutils 6.6. ** Bug fixes ++++++ coreutils-6.6.diff -> coreutils-6.7.diff ++++++ ++++++ coreutils-6.6.tar.bz2 -> coreutils-6.7.tar.bz2 ++++++ ++++ 72226 lines of diff (skipped) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Remember to have fun... --------------------------------------------------------------------- To unsubscribe, e-mail: opensuse-commit+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-commit+help@opensuse.org