X-Recipient: archive-cygwin AT delorie DOT com X-SWARE-Spam-Status: No, hits=-2.9 required=5.0 tests=ALL_TRUSTED,BAYES_00 X-Spam-Check-By: sourceware.org X-SWARE-Spam-Status: No, hits=-6.4 required=5.0 tests=BAYES_00,DKIM_SIGNED,DKIM_VALID,FREEMAIL_FROM,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_LOW,RCVD_IN_HOSTKARMA_W,RCVD_IN_HOSTKARMA_WL From: Charles Wilson Date: Sat, 01 Sep 2012 14:10:48 -0400 Subject: [ANNOUNCEMENT] Updated: automake1.11-1.11.6-1 To: cygwin AT cygwin DOT com Message-Id: Reply-To: cygwin AT cygwin DOT com Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Automake is a tool for automatically generating `Makefile.in's suitable for use with Autoconf, compliant with the GNU Makefile standards, and portable to various make implementations. This is the first release in the automake-1.11 release series, and contains the latest version of automake system, automake-1.11. This is a security update to the latest upstream version. This cygwin package, automake1.11, can be installed without conflict alongside the existing automake1.10, automake1.9, automake1.8, automake1.7, automake1.6, automake1.5, and automake1.4 cygwin packages. Changes (automake1.11-1.11.3-1 to automake1.11-1.11.6-1) ====================================================================== * Update to latest upstream release in the automake-1.11.x series. * Fixes security issue + CVE-2012-3386: make distcheck vs. o+w permissions * Use new cygport(1) capabilities to automatically generate the setup.hint CHANGES (excerpts from upstream announcement): ====================================================================== 1.11.6: This message announces the Automake 1.11.6 bug-fixing 1.11.6: release. 1.11.6: 1.11.6: This release FIXES A SECURITY VULNERABILITY (CVE-2012-3386), 1.11.6: so you are strongly encouraged to upgrade your existing 1.11.6: Automake installation ASAP. 1.11.6: 1.11.6: With this release, the recipe of the 'distcheck' target no 1.11.6: longer grants temporary world-wide write permissions on the 1.11.6: extracted distdir. Even if such rights were only granted for 1.11.6: a vanishingly small time window, the implied race condition 1.11.6: proved to be enough to allow a local attacker to run arbitrary 1.11.6: code with the privilegesof the user running "make distcheck". 1.11.6: 1.11.6: The fix of this security vulnerability is the only change 1.11.6: between the earlier 1.11.5 release and the present 1.11.6 one. 1.11.6: 1.11.6: See the original release announcement for details. 1.11.6: http://lists.gnu.org/archive/html/automake/2012-07/msg00021.html 1.11.5: We are pleased to announce the Automake 1.11.5 maintenance 1.11.5: release. 1.11.5: 1.11.5: This is a bugfix release, fixing a couple of serious regressions 1.11.5: in Vala support (regressions introduced in automake 1.11.4): 1.11.5: 1.11.5: - Vala files with '.vapi' extension are now recognized and 1.11.5: handled correctly again. See automake bug#11222. 1.11.5: 1.11.5: - Vala support work again for projects that contain some 1.11.5: program built from '.vala' (and possibly '.c') sources and 1.11.5: some other program built from '.c' sources *only*. See 1.11.5: automake bug#11229. 1.11.5: 1.11.5: Thanks to Marc-Antoine Perennou for pointing out these bugs and 1.11.5: providing a fix for them. 1.11.5: 1.11.5: See the original release announcement for details. 1.11.5: http://lists.gnu.org/archive/html/automake/2012-04/msg00036.html 1.11.4: We are pleased to announce the Automake 1.11.4 maintenance 1.11.4: release. 1.11.4: 1.11.4: This is mostly a bugfix release, fixing few recent and long- 1.11.4: standing bugs. 1.11.4: 1.11.4: It also contains minor enhancements to the 'ar-lib' and 1.11.4: 'compile' script (thanks to Peter Rosin), and adds support for 1.11.4: automatic dependency tracking with the IBM XL C/C++ compiler 1.11.4: (thanks to Michael Hofmann) and the Tiny C Compiler (thanks to 1.11.4: prodding by Vincent Lefevre, see automake bug#11007). 1.11.4: 1.11.4: The most important change is surely the fact that the install 1.11.4: rules do not create an empty '$(foodir)' directory anymore when 1.11.4: an empty "foo_PRIMARY" is declared (conditionally or 1.11.4: unconditionally) in Makefile.am. See automake bugs #11030 and 1.11.4: #10997: 1.11.4: 1.11.4: 1.11.4: 1.11.4: 1.11.4: See the original release announcement for details. 1.11.4: http://lists.gnu.org/archive/html/automake/2012-04/msg00005.html Testsuite results: ======================================================= 1 of 910 tests failed (41 tests were not run) ======================================================= Testsuite Details: ===================================== FAIL: cond32.test + This was a fork/rebase error. Rerunning the test passed. -- Charles Wilson volunteer automake maintainer for cygwin ==================================================================== To update your installation, click on the "Install Cygwin now" link on the http://cygwin.com/ web page. This downloads setup.exe to your system. Then, run setup and answer all of the questions. *** CYGWIN-ANNOUNCE UNSUBSCRIBE INFO *** If you want to unsubscribe from the cygwin-announce mailing list, look at the "List-Unsubscribe: " tag in the email header of this message. Send email to the address specified there. It will be in the format: cygwin-announce-unsubscribe-you=yourdomain DOT com AT cygwin DOT com If you need more information on unsubscribing, start reading here: http://sourceware.org/lists.html#unsubscribe-simple Please read *all* of the information on unsubscribing that is available starting at this URL. -- Problem reports: http://cygwin.com/problems.html FAQ: http://cygwin.com/faq/ Documentation: http://cygwin.com/docs.html Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple