sed: Update to version 4.10

Message ID 20260427184701.2249214-3-adolf.belka@ipfire.org
State Staged
Commit bd02d1d84e8d1e20df624ce7dd02300c369d0134
Headers
Series sed: Update to version 4.10 |

Commit Message

Adolf Belka 27 Apr 2026, 6:47 p.m. UTC
- Update from version 4.9 to 4.10
- Update of rootfile
- Changelog
4.10
Bug fixes
  sed 's/a/b/g' (and other global substitutions) now works on input
   lines longer than 2GB. Previously, matches beyond the 2^31 byte offset
   would evoke a "panic" (exit 4).
   [bug present since the beginning]
  'sed --follow-symlinks -i' no longer has a TOCTOU race that could let
   an attacker swap a symlink between resolution and open, causing sed to
   read attacker-chosen content and write it to the original target.
   [bug introduced in sed 4.1e]
  sed no longer falsely matches when back-references are combined with
   optional groups (.?) and the $ anchor.  For example, this no longer
   falsely matches the empty string at beginning of line:
     $ echo ab | sed -E 's/^(.?)(.?).?\2\1$/X/'
     Xab
   [bug present since "the beginning"]
  In --posix mode, sed no longer mishandles backslash escapes (\n,
   \t, \a, etc.) after a named character class like [[:alpha:]].
   For example, 's/^A\n[[:alpha:]]\n*/XXX/' would fail to match the
   trailing newline, treating \n as a literal backslash and an 'n'
   rather than a newline.  This happened when an earlier backslash
   escape in the same regex had already been converted, shifting the
   in-place normalization buffer.
   [bug introduced in sed 4.9]
  sed --debug no longer crashes when a label (":") command is compiled
   before the --debug option is processed, e.g., sed -f<(...) --debug.
   [bug introduced in sed 4.7 with --debug]
  sed no longer rejects the documented GNU extension 'a**' (equivalent
   to 'a*') in Basic Regular Expression (BRE) mode.  Previously, this
   worked only with -E (ERE mode), even though grep has always accepted
   it in BRE mode.
   [bug present since "the beginning"]
  sed no longer rejects "\c[" in regular expressions
   [bug present since the beginning]
  'sed --follow-symlinks -i' no longer mishandles an operand that is a
   short symbolic link to a long symbolic link to a file.
   [bug introduced in sed 4.9]
  Fix some some longstanding but unlikely integer overflows.
  Internally, 'sed' now more often prefers signed integer arithmetic,
   which can be checked automatically via 'gcc -fsanitize=undefined'.
Changes in behavior
  In the default C locale, diagnostics now quote 'like this' (with
   apostrophes) instead of `like this' (with a grave accent and an
   apostrophe).  This tracks the GNU coding standards.
   'sed --posix' now warns about uses of backslashes in the 's' command
   that are handled by GNU sed but are not portable to other
   implementations.
Build-related
  builds no longer fail on platforms without the <getopt.h> header or
   getopt_long function.
   [bug introduced in sed 4.9]

Signed-off-by: Adolf Belka <adolf.belka@ipfire.org>
---
 lfs/sed | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
  

Patch

diff --git a/lfs/sed b/lfs/sed
index 89ca4f250..f11096053 100644
--- a/lfs/sed
+++ b/lfs/sed
@@ -1,7 +1,7 @@ 
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2026  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@ 
 
 include Config
 
-VER        = 4.9
+VER        = 4.10
 
 THISAPP    = sed-$(VER)
 DL_FILE    = $(THISAPP).tar.xz
@@ -53,7 +53,7 @@  objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_BLAKE2 = 6c7c7dc782b87c3bd0b5e826ba46c2f1dc7bd8c1159945fcf14b394711742964628774cf9f27d844b672721d7849e6c31992d82fafb9ed4118b7feb60406d1e1
+$(DL_FILE)_BLAKE2 = 6decea38a3e6eb3b672af2380ec3f32759b60350dba528d28a57b74806db33208baed69a8497d423bc7626105930e3e9c9ea68f68b8bcd4a3270f2d8922a2487
 
 install : $(TARGET)