On Thu, Mar 3, 2011 at 10:00 PM, Bob Friesenhahn
<[email protected]> wrote:

> Are you sure that libltdl from libtool-2.4 is being used?  The dtruss trace
> (from Michael Ellis) at
> http://lists.gnu.org/archive/html/bug-guile/2011-03/msg00020.html shows
> insecure accesses more like I would expect from a libtool version suffering
> from CVE-2009-3736, which is very dangerous under OS X.

Thanks for the warning, Bob.  It's probably not 2.4 as my GNU tool
versions have been mostly installed from macports until very recently.
 It's a choice I now regret as it's causing me increasing amounts of
grief lately.   If I install 2.4, do I need to rebuild everything that
uses it or will the newer library be picked up at run time?

Cheers,
Mike

Reply via email to