[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: warn-on-use.m4 requires modern M4?

From: Ralf Wildenhues
Subject: Re: warn-on-use.m4 requires modern M4?
Date: Tue, 12 Jan 2010 19:19:35 +0100
User-agent: Mutt/1.5.20 (2009-10-28)


throwing in my two cents:

* Ben Pfaff wrote on Tue, Jan 12, 2010 at 06:23:32PM CET:
> Eric Blake writes:
> > Meanwhile, based on the recent security hole in older automake,
> > should we bite the bullet and require automake 1.10.3 or better
> > (which in turn bumps the minimum autoconf requirement from 2.59
> > up to 2.60)?
> Debian stable has Automake 1.10.1.  In my opinion it would be sad
> to exclude that version, if it's possible to allow it.

More to the point, I don't think you should exclude any Automake version
due to a security bug based on version number alone.  They can all be
patched quite trivially (patches exist in the git branches), and I
expect that distributors do that instead of moving lots of code bases to
newer Automake.

Or, let's say, I hope they do something.  ;-)


PS: we could write a feature test, disallowing broken Automake ...

reply via email to

[Prev in Thread] Current Thread [Next in Thread]