You are not logged in.

#1 2004-04-13 03:56:06

jf/
Member
Registered: 2003-10-26
Posts: 79

question about security / "last updated" date in p

question about security & the meaning of that "last updated" date in the package listing

hi guys, just saw an automake advisory recently, and wanted to check out how updated arch is. Kudos to Judd (and the rest of the arch guys as well) -arch seems to be doing fine in this case!

the automake symbolic link vuln is solved by v1.8.3 - which arch has already. But one question - while searching for automake in the package listing (http://www.archlinux.org/packages.php), i see that the "last updated" date is 9-March-2004 (see also http://www.archlinux.org/packages.php?id=2) - and a reference to the actual gnu tar is made ("ftp://ftp.gnu.org/gnu/automake/automake-1.8.3.tar.gz") - BUT...when i go over to the actual gnu page for automake (http://www.gnu.org/directory/automake.html)... i discover that v1.8.3 (stable) was only released on 22-March-2004???

just curious, but eh... what's going on here? what does the "last updated" date in the package listing actually mean?

Offline

#2 2004-04-13 11:14:54

farphel
Forum Fellow
From: New Hampshire - USA
Registered: 2003-09-18
Posts: 250
Website

Re: question about security / "last updated" date in p

Looks like the page you link to is incorrect.  If you follow the link from the Arch package and follow the downloading link (http://ftp.gnu.org/gnu/automake/), you'll see that 1.8.3 came out on 07-Mar-2004.


Follow the link below, sign up, and accept one promotional offer.  If I can get five suckers (err... friends) to do this, I'll get a free iPod.  Then you too can try to get a free iPod. Thanks! http://www.freeiPods.com/?r=11363142

Offline

#3 2004-04-14 01:34:39

jf/
Member
Registered: 2003-10-26
Posts: 79

Re: question about security / "last updated" date in p

farphel wrote:

Looks like the page you link to is incorrect.  If you follow the link from the Arch package and follow the downloading link (http://ftp.gnu.org/gnu/automake/), you'll see that 1.8.3 came out on 07-Mar-2004.

now this is ridiculous (that the gnu actual homepage should be wrong), but hm... - it certainly looks like it... oh well. thanks!

Offline

Board footer

Powered by FluxBB