The release of package manager Pacman 7.0, used in the Arch Linux distribution, is now available. The notable changes include:
- A new parameter, DownloadUser, has been added to the settings, allowing the privileges to be dropped when performing file download operations and keeping the downloaded files in a temporary directory owned by the specified user in the directive.
- Isolation mechanisms are employed in Linux kernel-based systems that prevent the process executing the download from writing to areas of the FС outside the designated download directory. To disable the isolation mode during the download, the DisableSandbox setting and the command line option "--disable-sandbox" are available.
- A check has been added to ensure that both the database and the digital signature are obtained from the same source.
- In the code, to prevent buffer overflows, the snprintf function is used instead of sprintf, which sets a limit on the size of the resulting string.
- The ability to build in the "-D_FORTIFY_SOURCE=3" mode has been established, which detects potential buffer overflows during the execution of string functions defined in the string.h header file.
- The issue that could lead to buffer overflow when processing very long file paths to scripts has been resolved.
Source: opennet.ru
