Announcing the release of version 4.3.8 of GNU findutils

I announce the release of version 4.3.8 of GNU findutils.

GNU findutils is a set of software tools for finding files
that match
certain criteria and for performing various operations on
them.
Findutils includes the programs "find",
"xargs" and "locate".  More
information about findutils is available at
http://www.gn
u.org/software/findutils/.

This is a "development" release of findutils.  It
can be downloaded
from  ftp://alpha.gnu.org/gnu/findutils.  The 4.3.x release
series is
intended to allow people to try out, comment on or
contribute to new
features of findutils.  During the 4.3.x release series some
features
may be introduced and then changed or removed as a result of
feedback
or experience.  In short, please don't rely on backward
compatibility
later in the release series.

While this is a development release, it is tested before
being
released, principally with the regression test suite (run
"make check"
to use it).  The Savannah website
(http://
savannah.gnu.org/bugs/?group=findutils) contains a
current
list of known bugs in findutils (for both the stable and
development
branches).

This release is primarily a bugfix release.  All the changes
since the
previous release are summarised below.

Bugs in GNU findutils should be reported to the findutils
bug tracker
at http:/
/savannah.gnu.org/bugs/?group=findutils.  Reporting bugs
via
the web interface will ensure that you are automatically
informed when
the bug has been fixed.  General discussion of findutils
takes place
on the bug-findutils mailing list.  To join the
'bug-findutils'
mailing list, send email to <bug-findutils-requestgnu.org>.

To verify the GPG signature of the release, you will need
the public
key of the findutils maintainer, James Youngman.  You can
download
this from http://savannah.gn
u.org/users/jay.  Alternatively, you
could query a PGP keyserver, but you will need to use one
that can
cope with subkeys containing photos.  Many older key servers
cannot do
this.  I use subkeys.pgp.net.  I think that one works.  See
also the
"Downloading" section of http://www.gn
u.org/software/findutils/.

I would like to thank <nixesperi.org.uk> for help
in the preparation
of this release.

* Major changes in release 4.3.8

** Bug Fixes

#20157: Avoid segfault in locate when run as root.  This is
caused by
a buffer overrun, but at this time no explot mechanism is
known.

--
James Youngman <jaygnu.org>
GNU findutils maintainer


_______________________________________________
Bug-findutils mailing list
Bug-findutilsgnu.org
h
ttp://lists.gnu.org/mailman/listinfo/bug-findutils

On 12 Jun 2007, James Youngman spake thusly:
> I would like to thank <nixesperi.org.uk> for help
in the preparation
> of this release.

You're welcome  I could
never work with a crashing locate, it would
be even more annoying than a crashing ls.

> #20157: Avoid segfault in locate when run as root. 
This is caused by
> a buffer overrun, but at this time no explot mechanism
is known.
                                        ^^^^^^
Is it excessively pedantic of me to point at that and say
you have an
off-by-i bug? 


_______________________________________________
Bug-findutils mailing list
Bug-findutilsgnu.org
h
ttp://lists.gnu.org/mailman/listinfo/bug-findutils

On 6/12/07, Nix <nixesperi.org.uk> wrote:
> > #20157: Avoid segfault in locate when run as root.
 This is caused by
> > a buffer overrun, but at this time no explot
mechanism is known.
>                                         ^^^^^^
> Is it excessively pedantic of me to point at that and
say you have an
> off-by-i bug? 

Gah.   I should give up typing; I'm no good at it.
James.


_______________________________________________
Bug-findutils mailing list
Bug-findutilsgnu.org
h
ttp://lists.gnu.org/mailman/listinfo/bug-findutils