From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gcc-bugs-return-313476-listarch-gcc-bugs=gcc.gnu.org@gcc.gnu.org>
Received: (qmail 15978 invoked by alias); 1 Apr 2010 16:46:15 -0000
Received: (qmail 15760 invoked by uid 48); 1 Apr 2010 16:45:59 -0000
Date: Thu, 01 Apr 2010 16:46:00 -0000
Subject: [Bug other/43620]  New: Uploading to gnu.org will fail due to automake security issue
X-Bugzilla-Reason: CC
Message-ID: <bug-43620-15771@http.gcc.gnu.org/bugzilla/>
Reply-To: gcc-bugzilla@gcc.gnu.org
To: gcc-bugs@gcc.gnu.org
From: "rwild at gcc dot gnu dot org" <gcc-bugzilla@gcc.gnu.org>
Mailing-List: contact gcc-bugs-help@gcc.gnu.org; run by ezmlm
Precedence: bulk
List-Id: <gcc-bugs.gcc.gnu.org>
List-Archive: <http://gcc.gnu.org/ml/gcc-bugs/>
List-Post: <mailto:gcc-bugs@gcc.gnu.org>
List-Help: <mailto:gcc-bugs-help@gcc.gnu.org>
Sender: gcc-bugs-owner@gcc.gnu.org
X-SW-Source: 2010-04/txt/msg00116.txt.bz2

The Automake 'make dist' security issue in 1.11 (fixed in 1.11.1) will likely
prevent uploading to gnu.org, even though GCC does not use the rule.
See here: <http://sourceware.org/ml/binutils/2010-03/msg00452.html>.

Using no-dist throughout, or updating to 1.11.1, should be possible, or talking
to the gnu.org admins.  The update to 1.11.1 is really trivial for trunk, but
for older branches, some other strategy would need to be used.

I'm working on a patch.

CC:ing a RM.


-- 
           Summary: Uploading to gnu.org will fail due to automake security
                    issue
           Product: gcc
           Version: 4.5.0
            Status: UNCONFIRMED
          Severity: blocker
          Priority: P3
         Component: other
        AssignedTo: unassigned at gcc dot gnu dot org
        ReportedBy: rwild at gcc dot gnu dot org


http://gcc.gnu.org/bugzilla/show_bug.cgi?id=43620