util-linux-2.37.4

[Douglas R. Reno]

New point version, and a security release

util-linux 2.37.4 Release Notes
===============================

This release fixes security issue in chsh(1) and chfn(8):

CVE-2022-0563

  The readline library uses INPUTRC= environment variable to get a path
  to the library config file. When the library cannot parse the
  specified file, it prints an error message containing data from the
  file.
    
  Unfortunately, the library does not use secure_getenv() (or a similar
  concept), or sanitize the config file path to avoid vulnerabilities that
  could occur if set-user-ID or set-group-ID programs.

[Xi Ruoyao]

It seems we can remove "runstatedir=/run". It's now the default.

[Bruce Dubbs]

OK, I'll do that.

[Bruce Dubbs]

Fixed at commit 6af4dabc16cc044f4d65372cdbd203310df08e20

Package updates and fixes.
    Add binutils-2.38 LTO patch.
    Update to util-linux-2.37.4.
    Update to man-db-2.10.1.
    Update to linux-5.16.9.
    Update to vim-8.2.4383.
    Update to iana-etc-20220207.