* Adam D. Barratt (adam@adam-barratt.org.uk) wrote: > On Sun, 2012-07-29 at 23:24 -0400, Eric Dorland wrote: > > Proposed stable update for automake1.9. > > This looks like the patches that are already in stable? > > +automake1.9 (1.9.6+nogfdl-3.1) unstable; urgency=high Err whoops, attached the wrong diff. Here's the right one. -- Eric Dorland <eric@kuroneko.ca> ICQ: #61138586, Jabber: hooty@jabber.com
diff -u automake1.9-1.9.6+nogfdl/debian/changelog automake1.9-1.9.6+nogfdl/debian/changelog --- automake1.9-1.9.6+nogfdl/debian/changelog +++ automake1.9-1.9.6+nogfdl/debian/changelog @@ -1,3 +1,10 @@ +automake1.9 (1.9.6+nogfdl-3.1+squeeze1) stable; urgency=low + + * lib/am/distdir.am: Backport fix for CVE-2012-3386 "Temporary worldwide + write permissions during make distcheck". (Closes: #681118) + + -- Eric Dorland <eric@debian.org> Sun, 29 Jul 2012 22:59:38 -0400 + automake1.9 (1.9.6+nogfdl-3.1) unstable; urgency=high * Non-maintainer upload by the Security Team. diff -u automake1.9-1.9.6+nogfdl/lib/am/distdir.am automake1.9-1.9.6+nogfdl/lib/am/distdir.am --- automake1.9-1.9.6+nogfdl/lib/am/distdir.am +++ automake1.9-1.9.6+nogfdl/lib/am/distdir.am @@ -323,7 +323,7 @@ ## Make the new source tree read-only. Distributions ought to work in ## this case. However, make the top-level directory writable so we ## can make our new subdirs. - chmod -R a-w $(distdir); chmod a+w $(distdir) + chmod -R a-w $(distdir); chmod u+w $(distdir) mkdir $(distdir)/_build mkdir $(distdir)/_inst ## Undo the write access.
Attachment:
signature.asc
Description: Digital signature