Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

[Dmitry V. Levin]

Hi,

On Tue, Jul 10, 2012 at 12:08:38AM +0200, Stefano Lattarini wrote:
> Hi Dmitry.
> 
> On 07/09/2012 11:34 PM, Dmitry V. Levin wrote:
> > On Mon, Jul 09, 2012 at 06:14:03PM +0200, Stefano Lattarini wrote:
> >> This message announces the Automake 1.11.6 bug-fixing release.
> > 
> > Could you push refs/heads/branch-1.11
> > 
> This branch is not active anymore, having been discontinued after Automake 
> 1.12
> had been released.  Just refer to the relevant tags in the Git repository 
> (e.g.,
> for the version containing the fix for the CVE-2012-3386 vulnerability, 
> v1.11.6).
> 
> > and refs/tags/v1.11.6, please?
> > 
> Hmm...  hasn't this been published already?  I see:
> 
>   <http://git.savannah.gnu.org/cgit/automake.git/tag/?id=v1.11.6>
> 
> Or am I missing something?

Thanks.  What happened is that the tag was published but it is not
referenced by any branch so "git fetch" doesn't fetch it by default.
A little surprising, but not actually a problem.


-- 
ldv

pgpt2fUlAw275.pgp
Description: PGP signature