Package: automake-1.15 / 1:1.15-6

Metadata

Package Version Patches format
automake-1.15 1:1.15-6 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 texi rename.diff | (download)

doc/automake.texi | 10 5 + 5 - 0 !
1 file changed, 5 insertions(+), 5 deletions(-)

 texi file rename for multiple automake versions


0002 Make output of mdate sh deterministic.patch | (download)

lib/mdate-sh | 6 5 + 1 - 0 !
1 file changed, 5 insertions(+), 1 deletion(-)

 make output of mdate-sh deterministic

mdate-sh pretty-prints the modification time of a file.
But it's output can vary depending on the timezone of
0003 install sh avoid low risk race in tmp.patch | (download)

lib/install-sh | 23 15 + 8 - 0 !
1 file changed, 15 insertions(+), 8 deletions(-)

 install-sh: avoid (low risk) race in /tmp

Ensure that nobody can cross privilege boundaries by pre-creating
symlink on '$tmpdir' path.

Just testing 'mkdir -p' by creating '/tmp/ins$RANDOM-$$/d' is not
safe because '/tmp' directory is usually world-writeable and
'/tmp/ins$RANDOM-$$' content could be pretty easily guessed by
attacker (at least for shells where $RANDOM is not supported).
So, as the first step, create the '/tmp/ins$RANDOM-$$' without -p.
This step would fail early if somebody wanted catch us.

Note that systems that implement (and have enabled)
fs.protected_symlinks kernel feature are not affected even without
this commit.

References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760455
https://bugzilla.redhat.com/show_bug.cgi?id=1140725

* lib/install-sh: Implement safer 'mkdir -p' test by running
'$mkdirprog $mkdir_mode "$tmpdir"' first.
(scriptversion): Bump.

0004 Fix testsuite failure caused by perl warnings.patch | (download)

bin/automake.in | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix testsuite failure, caused by perl warnings


0005 Use system help2man if it is available.patch | (download)

configure.ac | 3 3 + 0 - 0 !
doc/Makefile.inc | 2 1 + 1 - 0 !
2 files changed, 4 insertions(+), 1 deletion(-)

 use system help2man if it is available


0006 Disable t check12.sh and t check12 w.sh.patch | (download)

t/list-of-tests.mk | 2 2 + 0 - 0 !
1 file changed, 2 insertions(+)

 disable t/check12.sh and t/check12-w.sh

They no longer pass and it's not clear how to fix them.