Re: Make v4.2.1

[Paul Smith]

On Tue, 2024-09-17 at 19:50 +0000, Matteo.J.Herrera--- via Users list
for the GNU implementation of make wrote:
> I am interested in downloading make v4.2.1 but had a few security
> questions:
> 
> 
>   1.  Is there an end of life/support for the versions or is based on
> when the latest version releases?

It depends on what you mean by "end of life" and "support".

We don't remove any old versions of GNU Make from our download sites. 
So if "end of life" means "not able to be obtained" then there is no
end of life.

We don't issue patches for past versions.  So if "end of life" means
"no longer receiving updates or patches" then every release of GNU Make
except the latest is end of life.

For "support", we are a free software group and we provide support only
in that, you can send an email to our mailing lists (or file a bug at
our website) describing the problem and we'll try to help, subject to
other work or interests.

>   2.  Are there any known CVEs that you are aware of for the versions
> I am requesting?

We don't track CVEs.  You can search for them if you want to know.  Or
put another way, "I'm not aware of any CVEs for GNU Make because I've
never looked".

>   3.  What (if any) ports, protocols, or services are needed for
> make?

None.

>   4.  Does the software/application require administrator rights, or
> other privileges, to operate?

No.

>   5.  Does the software require and/or install any service
> account(s)?

No.