On Tue, 2024-09-17 at 19:50 +0000, Matteo.J.Herrera--- via Users list for the GNU implementation of make wrote: > I am interested in downloading make v4.2.1 but had a few security > questions: > > > 1. Is there an end of life/support for the versions or is based on > when the latest version releases?
It depends on what you mean by "end of life" and "support". We don't remove any old versions of GNU Make from our download sites. So if "end of life" means "not able to be obtained" then there is no end of life. We don't issue patches for past versions. So if "end of life" means "no longer receiving updates or patches" then every release of GNU Make except the latest is end of life. For "support", we are a free software group and we provide support only in that, you can send an email to our mailing lists (or file a bug at our website) describing the problem and we'll try to help, subject to other work or interests. > 2. Are there any known CVEs that you are aware of for the versions > I am requesting? We don't track CVEs. You can search for them if you want to know. Or put another way, "I'm not aware of any CVEs for GNU Make because I've never looked". > 3. What (if any) ports, protocols, or services are needed for > make? None. > 4. Does the software/application require administrator rights, or > other privileges, to operate? No. > 5. Does the software require and/or install any service > account(s)? No.
