[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

What is the status of the official libtool-1.5 tarball?

From: Alan W. Irwin
Subject: What is the status of the official libtool-1.5 tarball?
Date: Tue, 02 Sep 2003 09:53:46 -0700 (PDT)

FSF rightly withdrew many of their tarballs to check for malicious code
because a cracker owned them for many months.  However, it has now been a
month since that withdrawal and there is still no official libtool-1.5
tarball at  This affects many projects
(like the PLplot scientific plotting tool []) where we are anxious
to take advantage of the improved Cygwin and Mac OS X support in
libtool-1.5.  I downloaded libtool-1.5 from the official site in July and
was still experimenting with it when news of the crack became known.  I
stopped all experimenting at that point, and I am now waiting for when the
libtool-1.5 tarball is officially reinstated so I can verify what I
downloaded has no malicious code in it.

Is there still a lot of work to do to verify the official libtool-1.5
tarball or is there just some administrative hurdle (such as propagating a
gpg chain of trust) that is causing the delay?

Alan W. Irwin
email: address@hidden
phone: 250-727-2902

Astronomical research affiliation with Department of Physics and Astronomy,
University of Victoria (

Programming affiliations with the PLplot scientific plotting software
package (, the Yorick front-end to PLplot (, the
Loads of Linux Links project (, and the Linux Brochure Project

Linux-powered Science

reply via email to

[Prev in Thread] Current Thread [Next in Thread]