Thanks. This is a bug in the glibc regular expression matcher. It's part
of a well known series of bugs. See, for example:
https://sourceware.org/bugzilla/show_bug.cgi?id=12896
https://sourceware.org/bugzilla/show_bug.cgi?id=17356
It's not of much practical concern since the attacker should
On 07/11/2023 08:09, Przemysław Sztoch via GNU coreutils General Discussion
wrote:
Please add -C, --directory=DIR to sha256/512sum with similar action as
in tar command:
Change to DIR before performing any operations. This option is
order-sensitive, i.e. it affects all options that follow.
Please add -C, --directory=DIR to sha256/512sum with similar action as
in tar command:
Change to DIR before performing any operations. This option is
order-sensitive, i.e. it affects all options that follow.
Second sentence about order-sensitive is optional, but will be very
useful