Pacman 7.0, the package manager used in the Arch distribution, is now available. LinuxThe following changes can be highlighted:
- The DownloadUser parameter has been added to the settings, allowing you to reset privileges when performing file download operations and save the downloaded files to a temporary directory belonging to the user specified in the directive.
- In kernel-based systems Linux Sandbox mechanisms are enabled, preventing the boot process from writing to file system areas outside the boot directory. To disable sandbox mode during boot, the DisableSandbox setting and the "--disable-sandbox" command line option are available.
- Added verification that the database and digital signature are loaded from the same source.
- To prevent buffer overflows, the code uses the snprintf function instead of the sprintf function, which sets a limit on the size of the resulting string.
- The ability to build in the “-D_FORTIFY_SOURCE=3” mode has been adjusted, which detects possible buffer overflows when executing string functions defined in the string.h header file.
- Fixed an issue that could cause a buffer overflow when processing very long scriptlet file paths.
Source: opennet.ru
