We're pleased to announce the release of Automake 1.11.1.
Automake is a tool for automatically generating `Makefile.in's
suitable for use with Autoconf, compliant with the GNU Makefile
standards, and portable to various make implementations.
This is a pure bugfix release. It contains fixes for the parallel-tests
testsuite driver, python support, some documentation and portability
improvements. The most important change, however, is a security-related
issue: the `dist' and `distcheck' rules do not allow an untrusted user
to modify files that end up in the package tarball any more. See the
separate security announcement for details.
A big thanks to all people who have been testing pre-release, reporting
bugs, contributing code, suggesting enhancements, and answering user
questions on the mailing lists!
You can find the new release here:
ftp://ftp.gnu.org/gnu/automake/automake-1.11.1.tar.gz
ftp://ftp.gnu.org/gnu/automake/automake-1.11.1.tar.gz.sig
ftp://ftp.gnu.org/gnu/automake/automake-1.11.1.tar.bz2
ftp://ftp.gnu.org/gnu/automake/automake-1.11.1.tar.bz2.sig
Soon it will also appear on the GNU mirrors which are listed here:
http://www.gnu.org/order/ftp.html
and you might also reach a mirror near you through:
http://ftpmirror.gnu.org/automake/
Finally, here are the MD5 checksums:
c2972c4d9b3e29c03d5f2af86249876f automake-1.11.1.tar.bz2
4ee7f0ff5f0e467d58b6bd5da96b1c74 automake-1.11.1.tar.gz
Please report bugs by mail to <bug-autom...@gnu.org>.
Bugs fixed in 1.11.0a:
* Bugs introduced by 1.11:
- The `parallel-tests' test driver works around a GNU make 3.80 bug with
trailing white space in the test list (`TESTS = foo $(EMPTY)').
* Long standing bugs:
- On Darwin 9, `pythondir' and `pyexecdir' pointed below `/Library/Python'
even if the `--prefix' argument pointed outside of a system directory.
AM_PATH_PYTHON has been fixed to ignore the value returned from python's
`get_python_lib' function if it points outside the configured prefix,
unless the `--prefix' argument was either `/usr' or below `/System'.
- The testsuite does not try to change the mode of `ltmain.sh' files from
a Libtool installation (symlinked to test directories) any more.
- AM_PROG_GCJ uses AC_CHECK_TOOLS to look for `gcj' now, so that prefixed
tools are preferred in a cross-compile setup.
- The distribution is tarred up with mode 755 now by the `dist*' targets.
This fixes a race condition where untrusted users could modify files
in the $(PACKAGE)-$(VERSION) distdir before packing if the toplevel
build directory was world-searchable. This is CVE-2009-4029.
