public inbox for cygwin@cygwin.com
 help / color / mirror / Atom feed
From: Charles Wilson <cygwin@cwilson.fastmail.fm>
To: cygwin@cygwin.com
Subject: [ANNOUNCEMENT] Updated: automake1.11-1.11.6-1
Date: Sat, 01 Sep 2012 18:14:00 -0000	[thread overview]
Message-ID: <announce.20120901181145.16E98482499@frontend2.nyi.mail.srv.osa> (raw)

Automake is a tool for automatically generating `Makefile.in's
suitable for use with Autoconf, compliant with the GNU Makefile
standards, and portable to various make implementations. This is
the first release in the automake-1.11 release series, and contains
the latest version of automake system, automake-1.11.

This is a security update to the latest upstream version.

This cygwin package, automake1.11, can be installed without conflict
alongside the existing automake1.10, automake1.9, automake1.8,
automake1.7, automake1.6, automake1.5, and automake1.4 cygwin packages.

Changes (automake1.11-1.11.3-1 to automake1.11-1.11.6-1)
======================================================================
* Update to latest upstream release in the automake-1.11.x series.
* Fixes security issue
  + CVE-2012-3386: make distcheck vs. o+w permissions
* Use new cygport(1) capabilities to automatically generate the setup.hint

CHANGES (excerpts from upstream announcement):
======================================================================
1.11.6: This message announces the Automake 1.11.6 bug-fixing
1.11.6: release.
1.11.6: 
1.11.6: This release FIXES A SECURITY VULNERABILITY (CVE-2012-3386),
1.11.6: so you are strongly encouraged to upgrade your existing
1.11.6: Automake installation ASAP.
1.11.6: 
1.11.6: With this release, the recipe of the 'distcheck' target no
1.11.6: longer grants temporary world-wide write permissions on the
1.11.6: extracted distdir.  Even if such rights were only granted for
1.11.6: a vanishingly small time window, the implied race condition
1.11.6: proved to be enough to allow a local attacker to run arbitrary
1.11.6: code with the privilegesof the user running "make distcheck".
1.11.6: 
1.11.6: The fix of this security vulnerability is the only change
1.11.6: between the earlier 1.11.5 release and the present 1.11.6 one.
1.11.6: 
1.11.6: See the original release announcement for details.
1.11.6: http://lists.gnu.org/archive/html/automake/2012-07/msg00021.html



1.11.5: We are pleased to announce the Automake 1.11.5 maintenance
1.11.5: release.
1.11.5: 
1.11.5: This is a bugfix release, fixing a couple of serious regressions
1.11.5: in Vala support (regressions introduced in automake 1.11.4):
1.11.5: 
1.11.5:   - Vala files with '.vapi' extension are now recognized and
1.11.5:     handled correctly again.  See automake bug#11222.
1.11.5: 
1.11.5:   - Vala support work again for projects that contain some
1.11.5:     program built from '.vala' (and possibly '.c') sources and
1.11.5:     some other program built from '.c' sources *only*.  See
1.11.5:     automake bug#11229.
1.11.5:
1.11.5: Thanks to Marc-Antoine Perennou for pointing out these bugs and
1.11.5: providing a fix for them.
1.11.5: 
1.11.5: See the original release announcement for details.
1.11.5: http://lists.gnu.org/archive/html/automake/2012-04/msg00036.html



1.11.4: We are pleased to announce the Automake 1.11.4 maintenance
1.11.4: release.
1.11.4: 
1.11.4: This is mostly a bugfix release, fixing few recent and long-
1.11.4: standing bugs.
1.11.4: 
1.11.4: It also contains minor enhancements to the 'ar-lib' and
1.11.4: 'compile' script (thanks to Peter Rosin), and adds support for
1.11.4: automatic dependency tracking with the IBM XL C/C++ compiler
1.11.4: (thanks to Michael Hofmann) and the Tiny C Compiler (thanks to
1.11.4: prodding by Vincent Lefevre, see automake bug#11007).
1.11.4: 
1.11.4: The most important change is surely the fact that the install
1.11.4: rules do not create an empty '$(foodir)' directory anymore when
1.11.4: an empty "foo_PRIMARY" is declared (conditionally or
1.11.4: unconditionally) in Makefile.am.  See automake bugs #11030 and
1.11.4: #10997:
1.11.4: 
1.11.4:   <http://debbugs.gnu.org/10997>
1.11.4:   <http://debbugs.gnu.org/11030>
1.11.4: 
1.11.4: See the original release announcement for details.
1.11.4: http://lists.gnu.org/archive/html/automake/2012-04/msg00005.html



Testsuite results:
=======================================================
1 of 910 tests failed
(41 tests were not run)
=======================================================

Testsuite Details:
=====================================
FAIL: cond32.test
+ This was a fork/rebase error. Rerunning the test passed.


-- 
Charles Wilson
volunteer automake maintainer for cygwin

====================================================================

To update your installation, click on the "Install Cygwin now" link
on the http://cygwin.com/ web page.  This downloads setup.exe to
your system.  Then, run setup and answer all of the questions.

              *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO ***

If you want to unsubscribe from the cygwin-announce mailing list, look
at the "List-Unsubscribe: " tag in the email header of this message.
Send email to the address specified there.  It will be in the format:

cygwin-announce-unsubscribe-you=yourdomain.com@cygwin.com

If you need more information on unsubscribing, start reading here:

http://sourceware.org/lists.html#unsubscribe-simple

Please read *all* of the information on unsubscribing that is
available starting at this URL.


--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

                 reply	other threads:[~2012-09-01 18:14 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=announce.20120901181145.16E98482499@frontend2.nyi.mail.srv.osa \
    --to=cygwin@cwilson.fastmail.fm \
    --cc=cygwin@cygwin.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).