It was reported [1] that the join command suffered from a segfault when processing input streams that contained extremely long strings when used with the -i switch. This flaw is due to the inclusion of the coreutils-i18n.patch. SUSE has fixed this by fixing the patch. The changes can be seen here [2]. (There is probably e better place to get the patch, but I don't know where). [1] https://bugzilla.novell.com/show_bug.cgi?id=798541 [2] https://build.opensuse.org/request/show/149348#diff_headline_coreutils-i18n-patch_diff_action_0_submit_0_19 Statement: (none)
Created coreutils tracking bugs for this issue Affects: fedora-all [bug 903468]
Thanks Vincent, but fedora-all is not really true, I already fixed the issue in Rawhide... coreutils-8.20-6.fc19 - fix multiple segmantation faults in i18n patch (by SUSE) (#869442, #902917) Should I just close the bugzillas reported by you as duplicates of #902917/#869442 ? Btw. all RHELs are affected as well, they use the vulnerable alloca constructs as well...
Well, we're not as concerned with Rawhide as we are with released versions. So unless it's fixed in Fedora 17 and 18, the fedora-all tracker should remain open. Once they are fixed there, feel free to close it via the regular process. For RHEL, we know they are affected. See #c0's statement regarding how we are deferring the fix (low-impact flaw).
coreutils-8.17-8.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.
This issue has been addressed in following products: Red Hat Enterprise Linux 6 Via RHSA-2013:1652 https://rhn.redhat.com/errata/RHSA-2013-1652.html