-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Now that m4 1.4.5 is released, should we update the web pages to recommend
it?  m4 1.4.4 has some flaws, including an exploitable buffer overflow on
platforms that lack ecvt(3), that are inherited by autom4te.

I haven't seen the mail I sent to autotools-announce or info-gnu (I'm not
sure who moderates them, or if my post was rejected or still in the
queue), but a copy of the release announcement is here:
http://lists.gnu.org/archive/html/m4-discuss/2006-07/msg00003.html

- --
Life is short - so eat dessert first!

Eric Blake             [EMAIL PROTECTED]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.1 (Cygwin)
Comment: Public key at home.comcast.net/~ericblake/eblake.gpg
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEu42c84KuGfSFAYARAuNYAKCIoYjORMCDHAFhtWkDdAkfebvyXQCgsmFc
Edy4NbXHSvMWrrKhBrXlArQ=
=p7sL
-----END PGP SIGNATURE-----


_______________________________________________
Autoconf mailing list
Autoconf@gnu.org
http://lists.gnu.org/mailman/listinfo/autoconf

Reply via email to