Re: [bug-diffutils] I'd like to release 3.3

[Jim Meyering]

Denis Excoffier wrote:
> Hello,
>
> On the 2013-03-22 05:42, Jim Meyering wrote:
>
>> Hello,
>>
>> I want to release diffutils-3.3, primarily to make it so
>> the latest release is not susceptible to CVE-2012-3386.
>>
>> Here's the current state of NEWS:
>>
>>  ** New features
>>
>>    --new-file (-N) and --unidirectional-new-file now allow comparisons to 
>> "-".
>>    A standard input that's closed acts like a nonexistent file.
>>
>>    A file name containing spaces, double quotes, backslashes or control
>>    characters is now encoded in a diff header as a double-quoted C string
>>    literal.  The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v and
>>    \ooo (a three-digit octal number between 0 and 255) are used.
> Please mention the new --no-dereference option, for which i also suggest to
> add a shortopt('K'). Thanks.
>
> See also http://lists.gnu.org/archive/html/bug-gnu-utils/2009-03/msg00070.html

Thank your for noting that.
That definitely should have been mentioned in 3.3's announcement.
Unfortunately, I released it a few hours before learning
of this omission.

However, we should still fix it in the NEWS file.
Care to write the patch?  If you do, note that you'll
want to run "make update-NEWS-hash" before committing,
otherwise, "make syntax-check" will complain that you've
modified normally-immutable NEWS from a prior release.