ELSA-2013-1652

ELSA-2013-1652 - coreutils security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2013-11-25

Description

[8.4-31.0.1]
- clean up empty file if cp is failed [Orabug 15973168]

[8.4-31]
- adjust the fix for the du bindmounts failure(#836557)

* Mon Oct 07 2013 Ondrej Oprala - Fix su retvals (once again)

[8.4-29]
- CVE-2013-0221 CVE-2013-0223 CVE-2013-0222 - fix various
segmentation faults in sort, uniq and join(#1015019)

[8.4-28]
- su now returns correct retvals for all cases

[8.4-27]
- tail -F now disables inotify when encountering a symlink.
Polling is used instead.

* Mon Sep 16 2013 Ondrej Oprala - df now properly dereferences long FS names(again)

[8.4-25]
- pr -n no longer crashes when passed values >= 32.
Also line numbers are consistently padded with spaces,
rather than with zeros for certain widths. (#997537)

[8.4-24]
- fix su return codes when NOT killed by a signal (#996190)

[8.4-23]
- fix several newly introduced defects found by Coverity
check

[8.4-22]
- wait for su child to prevent errorneous execution of some
commands (#749679)
- correct return values after signal termination (#889531)
and propagation of child core dump info (#747592)
- dd now accepts 'status=none' to suppress all
informational output(#965654)
- cut --output-delimiter option was ignored for multibyte
locales (#867984)
- remove redundant setpwent() and setgrent () syscalls
from stat -U/-G to improve NIS performance (#911206)
- date: deal correctly with invalid input with special
characters (#960160)
- dd: provide support for the conv=sparse (#908980)
- su/runuser: clarify which envvars are preserved/initialized
in -p/-m and -l help/man documentation (#967623)
- du: properly detect bindmounts (#836557)
- df: fix alignment of columns (#842040)
- id,groups: fix correct group printing (#816708)
- mv : replace empty directories in cross file
system move (#980061)

[8.4-21]
- fix parsing of field regression in sort command
(introduced between RHEL5 and RHEL6 upstream) (#956143)

[8.4-20]
- revert to polling for unknown filesystems, update
known fs for tail and stat based on coreutils-8.21 (#827199)

Related CVEs

CVE-2013-0221

CVE-2013-0222

CVE-2013-0223

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 6 (i386)	coreutils-8.4-31.0.1.el6.src.rpm	3f4c7fad8b14779e083938e3a165a82b3bfeffa6603ae219493826ca93b2c20d	ELBA-2018-1862	ol6_i386_latest_archive
	coreutils-8.4-31.0.1.el6.src.rpm	3f4c7fad8b14779e083938e3a165a82b3bfeffa6603ae219493826ca93b2c20d	ELBA-2018-1862	ol6_u5_i386_base
	coreutils-8.4-31.0.1.el6.i686.rpm	b94a10953f7ccbfa16e089ea6c2bd62888c6680f4941308c8d0c5568f92d6daa	ELBA-2018-1862	ol6_i386_latest_archive
	coreutils-8.4-31.0.1.el6.i686.rpm	b94a10953f7ccbfa16e089ea6c2bd62888c6680f4941308c8d0c5568f92d6daa	ELBA-2018-1862	ol6_u5_i386_base
	coreutils-libs-8.4-31.0.1.el6.i686.rpm	ce809b3549ad6f1c75907eb11a4f7f69d1e9ae2a648fc7cc7953558bbf5d9a67	ELBA-2018-1862	ol6_i386_latest_archive
	coreutils-libs-8.4-31.0.1.el6.i686.rpm	ce809b3549ad6f1c75907eb11a4f7f69d1e9ae2a648fc7cc7953558bbf5d9a67	ELBA-2018-1862	ol6_u5_i386_base
Oracle Linux 6 (x86_64)	coreutils-8.4-31.0.1.el6.src.rpm	3f4c7fad8b14779e083938e3a165a82b3bfeffa6603ae219493826ca93b2c20d	ELBA-2018-1862	ol6_u5_x86_64_base
	coreutils-8.4-31.0.1.el6.src.rpm	3f4c7fad8b14779e083938e3a165a82b3bfeffa6603ae219493826ca93b2c20d	ELBA-2018-1862	ol6_x86_64_latest_archive
	coreutils-8.4-31.0.1.el6.x86_64.rpm	ab5f01ed714bbafe436680d5194e5ff17350a17f2157006a8700818e1671a774	ELBA-2018-1862	ol6_u5_x86_64_base
	coreutils-8.4-31.0.1.el6.x86_64.rpm	ab5f01ed714bbafe436680d5194e5ff17350a17f2157006a8700818e1671a774	ELBA-2018-1862	ol6_x86_64_latest_archive
	coreutils-libs-8.4-31.0.1.el6.x86_64.rpm	637b79f7096fbcaaf1b5dc5063d8c5173a8eb51968d9959ed5221bee9a12b0a1	ELBA-2018-1862	ol6_u5_x86_64_base
	coreutils-libs-8.4-31.0.1.el6.x86_64.rpm	637b79f7096fbcaaf1b5dc5063d8c5173a8eb51968d9959ed5221bee9a12b0a1	ELBA-2018-1862	ol6_x86_64_latest_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team