[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [libvirt] [PATCH] build: update to latest gnulib, for secure tarball



On 07/27/2012 11:18 AM, Eric Blake wrote:
> On 07/26/2012 07:52 AM, Eric Blake wrote:
>> On 07/26/2012 07:45 AM, Daniel P. Berrange wrote:
>>> On Fri, Jul 20, 2012 at 05:39:43PM -0600, Eric Blake wrote:
>>>> Pick up some build fixes in the latest gnulib.  In particular,
>>>> we want to ensure that official tarballs are secure, but don't
>>>> want to penalize people who don't run 'make dist', since fixed
>>>> automake still hasn't hit common platforms like Fedora 17.
>>>>
>>>> * .gnulib: Update to latest, for Automake CVE-2012-3386 detection.
> 
>>> ACK, since only 'make dist' people are forced to install new
>>> automake.
>>
>> Thanks, pushed, and I'm also backporting it to the maint branches.
> 
> Now pushed to v0.9.6-maint; I'm still working on v0.9.11.maint.

Done as well.

Cole, I also backported the fix for BZ 843836 to v0.9.11-maint; be aware
that when you cut a new build for Fedora 17, you will need a fixed
automake on your PATH.

-- 
Eric Blake   eblake redhat com    +1-919-301-3266
Libvirt virtualization library http://libvirt.org

Attachment: signature.asc
Description: OpenPGP digital signature


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]