[no description] https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc-2004Q4 2004-05-18T19:07:57Z 2004-05-18T19:07:57Z tron tron@pkgsrc.org 2004-05-18T19:07:57Z urn:sha1:00cc25d2c4768f0f50f09bc6d00b3b37411bfcc3 This fixes PR pkg/25475 Kibum Han. 2004-02-22T21:32:18Z recht recht@pkgsrc.org 2004-02-22T21:32:18Z urn:sha1:090d17952c0d76d72432882dbeb4bab781f247d3 many fixes/new features, among them: - nohup now always exits with status 127 when it finds an error, as POSIX requires; formerly it sometimes exited with status 1. - Several programs (including cut, date, dd, env, hostname, nl, pr, stty, and tr) now always exit with status 1 when they find an error; formerly they sometimes exited with status 2. - chgrp and chown now accept POSIX-mandated -L, -H, and -P options - du now accepts -P (--no-dereference), for compatibility with du of NetBSD and for consistency with e.g., chown and chgrp - date accepts a new option --rfc-2822, an alias for --rfc-822. - `sha1sum --check' now accepts the BSD format for SHA1 message digests in addition to the BSD format for MD5 ones. - md5sum --check now accepts the output of the BSD md5sum program, e.g., MD5 (f) = d41d8cd98f00b204e9800998ecf8427e - date -d DATE can now parse a DATE string like May-23-2003 - chown: `.' is no longer recognized as a separator in the OWNER:GROUP specifier on POSIX 1003.1-2001 systems. If chown *was not* compiled on such a system, then it still accepts `.', by default. If chown was compiled on a POSIX 1003.1-2001 system, then you may enable the old behavior by setting _POSIX2_VERSION=199209 in your environment. (see NEWS for a complete list) 2003-11-05T11:54:47Z tron tron@pkgsrc.org 2003-11-05T11:54:47Z urn:sha1:494f62f029a4390d83345e6ea51cd48c78b2c857 platforms) don't have it. 2003-11-05T00:05:06Z recht recht@pkgsrc.org 2003-11-05T00:05:06Z urn:sha1:0c58bd172625d0c32dc11625798f631b90bb5f91 1.) An integer overflow in ls in the fileutils or coreutils packages may allow local users to cause a denial of service or execute arbitrary code via a large -w value, which could be remotely exploited via applications that use ls, such as wu-ftpd. 2.) ls in the fileutils or coreutils packages allows local users to consume a large amount of memory via a large -w value, which can be remotely exploited via applications that use ls, such as wu-ftpd. See http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0853 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2003-0854 and the original report http://www.guninski.com/binls.html for details. Patches taken from Red Hat's Security Advisory RHSA-2003:309-01. reported by reed@ bump PKGREVISION