Package: sed
Version: 4.3-3
Severity: serious
Hello,
My name is Assaf, I'm a new co-maintainer of GNU Sed.
I'm writing to you about updates to 'sed-4.3' for the coming 'stretch'
release. A bug was discovered in sed-4.3 which can lead to a segfault.
We're working on releasing a bugfix release very soon:
https://lists.gnu.org/archive/html/sed-devel/2017-01/msg00027.html
Full details are here:
https://bugs.gnu.org/25390
Fixed in these commits:
http://git.savannah.gnu.org/cgit/sed.git/commit/?id=44d99bf5c98
http://git.savannah.gnu.org/cgit/sed.git/commit/?id=0f98f0055e4
The fix involves updates to the underlying gnulib library,
and I suspect backporting it won't be trivial (and will cause more
work for you upstream).
I understand this is very close to the 'freeze', but I think it would
be worth upgrading.
I'll update this ticket once it's released.
The release-candidate is:
http://meyering.net/sed/sed-4.3.20-e9ab.tar.xz
Please let us know if we can help with anything.
regards,
- assaf