Re: security bug in cp(1)

[Jim Meyering]

Paul Eggert <address@hidden> wrote:
> Maybe the NEWS file should be changed?  Something like this?
>
> 2007-08-17  Paul Eggert  <address@hidden>
>
>       * NEWS: The old cp -p bug affected coreutils releases before 6.0.
>       Problem reported by Soren Spies in
>       <http://lists.gnu.org/archive/html/bug-coreutils/2007-08/msg00106.html>.
>       To be conservative, just say the bug was in all versions through 6.6.
>
> --- old/NEWS  2007-08-08 14:08:02.000000000 -0700
> +++ new/NEWS  2007-08-17 12:50:12.000000000 -0700
> @@ -206,7 +206,7 @@ GNU coreutils NEWS
>    Fix similar problems with cp options like -p that imply
>    --preserve=ownership, with install -d when combined with either -o
>    or -g, and with mv when copying across file system boundaries.
> -  This bug affects coreutils 6.0 through 6.6.
> +  This bug affects all versions of coreutils through 6.6.
>
>    du --one-file-system (-x) would skip subdirectories of any directory
>    listed as second or subsequent command line argument.  This bug affects

Thanks.
Applied.