Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

2012-07-13 Thread Eric Dorland
* Stefano Lattarini (stefano.lattar...@gmail.com) wrote: > On 07/13/2012 12:51 PM, Diego Elio Pettenò wrote: > > Il 13/07/2012 10:50, Stefano Lattarini ha scritto: > >> Well, I'm really disappointed that nobody reported this upstream to us; > >> our non-Debian users would have been saved from two a

automake 1.12.1 changes extension of bison-generated header files

2012-07-13 Thread Matt Turner
Hi, In Mesa (http://www.mesa3d.org/) we generate some C++ code using Bison. The input is glsl_parser.yy and automake-1.11 and prior versions generated glsl_parser.h. 1.12 generates glsl_parser.hh, and if the input file is named .ypp it generates a .hpp file. How can we configure our build system s

Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

2012-07-13 Thread Stefano Lattarini
On 07/13/2012 12:51 PM, Diego Elio Pettenò wrote: > Il 13/07/2012 10:50, Stefano Lattarini ha scritto: >> Well, I'm really disappointed that nobody reported this upstream to us; >> our non-Debian users would have been saved from two and a half years of >> potential vulnerability :-/ > > It's worth

Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

2012-07-13 Thread Diego Elio Pettenò
Il 13/07/2012 10:50, Stefano Lattarini ha scritto: > Well, I'm really disappointed that nobody reported this upstream to us; > our non-Debian users would have been saved from two and a half years of > potential vulnerability :-/ It's worth noting that I just checked and Gentoo also applies the sam

Re: GNU Automake 1.11.6 released (fixes a SECURITY VULNERABILITY!)

2012-07-13 Thread Stefano Lattarini
On 07/12/2012 11:26 PM, Eric Dorland wrote: > > Thanks! It looks like this was actually fixed in Debian a few years > ago as part of the CVE-2009-4029 > (http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-4029) fix. > Well, I'm really disappointed that nobody reported this upstream to us; our