Richard W.M. Jones wrote:
Yes, in this case the attacker had set the serial number to 30, but
the latest upstream serial number was 3. autoreconf won't replace the
file in this case unless it is deleted. There really should be an
"always replace if you can" option in autoreconf.
Is that not what -f is supposed to do? At least, the documentation claims
so, but the implementation does not actually do what is documented.
Kevin Kofler