Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

[Diego Elio Pettenò]

Il 13/07/2012 10:50, Stefano Lattarini ha scritto:
> Well, I'm really disappointed that nobody reported this upstream to us;
> our non-Debian users would have been saved from two and a half years of
> potential vulnerability :-/

It's worth noting that I just checked and Gentoo also applies the same
patch, for us started by

https://bugs.gentoo.org/show_bug.cgi?id=295357

The report quoted there refers to Jim who, if I'm not mistaken, works
for RedHat, so I guess RHEL/Fedora/Centos are covered as well.

So as much as I'd like to blame Debian, it's not really their fault :)

-- 
Diego Elio Pettenò — Flameeyes
address@hidden — http://blog.flameeyes.eu/