[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [PATCH 3/7] build: require Automake >= 1.11.6
From: |
Stefano Lattarini |
Subject: |
Re: [PATCH 3/7] build: require Automake >= 1.11.6 |
Date: |
Thu, 30 Aug 2012 19:40:17 +0200 |
On 08/30/2012 07:13 PM, Jim Meyering wrote:
> Stefano Lattarini wrote:
>> Now that we use AM_TESTS_ENVIRONMENT, we should require at least
>> Automake >= 1.11.2; but since all the Automake version until 1.11.5
>> are vulnerable to CVE-2012-3386:
>>
>> <https://lists.gnu.org/archive/html/automake/2012-07/msg00023.html>
>>
>> it's even better to require 1.11.6.
>>
>> * configure.ac (AM_INIT_AUTOMAKE): Bump version requirement to 1.11.6.
>> * bootstrap.conf ($buildreq): Likewise.
>
> Thanks.
> I'm about to push this series.
>
> The only non-grammar/typo change has been to s/6/2/ to this c-set.
> I prefer that because there is already a check in maint.mk
> for that CVE, and besides, we don't want to preclude the use of
> an automake that declares itself 1.11.2 yet that has the fix
> for that bug.
>
Makes sense. Agreed.
> Here's the modified series.
> I'll wait for your ACK.
>
Seems good to me.
Thanks,
Stefano
- [PATCH 0/7] Reorganization of the coreutils test harness, Stefano Lattarini, 2012/08/30
- [PATCH 7/7] tests: get rid of the 'shell-or-perl' auxiliary script, Stefano Lattarini, 2012/08/30
- [PATCH 3/7] build: require Automake >= 1.11.6, Stefano Lattarini, 2012/08/30
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Jim Meyering, 2012/08/30
- Re: [PATCH 3/7] build: require Automake >= 1.11.6,
Stefano Lattarini <=
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Bernhard Voelker, 2012/08/30
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Jim Meyering, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Bernhard Voelker, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Stefano Lattarini, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Jim Meyering, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Bernhard Voelker, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Jim Meyering, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Bernhard Voelker, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Erik Auerswald, 2012/08/31
- Re: [PATCH 3/7] build: require Automake >= 1.11.6, Jim Meyering, 2012/08/31