Package: automake1.11 / 1:1.11.6-5

Metadata

Package Version Patches format
automake1.11 1:1.11.6-5 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
01 texi rename.diff | (download)

doc/automake.texi | 10 5 + 5 - 0 !
1 file changed, 5 insertions(+), 5 deletions(-)

 texi file rename for multiple automake versions


02 compile_f90_c_cxx fix.diff | (download)

tests/compile_f90_c_cxx.test | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 compile_f90_c_cxx-fix


03 texinfo fix itemx.diff | (download)

doc/automake.texi | 6 3 + 3 - 0 !
1 file changed, 3 insertions(+), 3 deletions(-)

 texinfo-fix-itemx


0004 Fix unescaped left brace.patch | (download)

automake.in | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix unescaped left brace


0005 aclocal declare function prototypes do not use in fu.patch | (download)

THANKS | 1 1 + 0 - 0 !
aclocal.in | 42 34 + 8 - 0 !
2 files changed, 35 insertions(+), 8 deletions(-)

 aclocal: declare function prototypes,
 do not use '&' in function calls

This change will also fix automake bug#11543 (from a report by Matt
Burgess).

* aclocal.in: Declare prototypes for almost all functions early, before
any actual function definition (but omit the prototype for the dynamically
generated '&search' function).  Add prototypes to any function definition.
Remove '&' from function invocations (i.e., simply use "func(ARGS..)"
instead of "&func(ARGS...)").
* THANKS: Update.

Signed-off-by: Stefano Lattarini <stefano.lattarini@gmail.com>

0006 install sh avoid low risk race in tmp.patch | (download)

lib/install-sh | 21 14 + 7 - 0 !
1 file changed, 14 insertions(+), 7 deletions(-)

 install-sh: avoid (low risk) race in /tmp

Backport of Pavel Raiskup's patch to fix install-sh race in /tmp

Ensure that nobody can cross privilege boundaries by pre-creating
symlink on '$tmpdir' path.

Just testing 'mkdir -p' by creating '/tmp/ins$RANDOM-$$/d' is not
safe because '/tmp' directory is usually world-writeable and
'/tmp/ins$RANDOM-$$' content could be pretty easily guessed by
attacker (at least for shells where $RANDOM is not supported).
So, as the first step, create the '/tmp/ins$RANDOM-$$' without -p.
This step would fail early if somebody wanted catch us.

Note that systems that implement (and have enabled)
fs.protected_symlinks kernel feature are not affected even without
this commit.

References:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=760455
https://bugzilla.redhat.com/show_bug.cgi?id=1140725

* lib/install-sh: Implement safer 'mkdir -p' test by running
'$mkdirprog $mkdir_mode "$tmpdir"' first.