-# We don't have a file m4/Makefile.am, so we need Automake 1.8 or later.
-AM_INIT_AUTOMAKE([1.8 check-news readme-alpha dist-bzip2])
+# Automake 1.10.3 and 1.11.1 fix a security flaw discussed here:
+#
+# http://thread.gmane.org/gmane.comp.sysutils.autotools.announce/131
+#
+# To avoid 1.11, we make 1.11.1 the minimum version.
+#
+# We want gnits strictness only when rolling a stable release. For
+# release candidates, we use version strings like 2.4.3_rc1, but gnits
+# doesn't like that, so we let the underscore disable gnits. Between
+# releases, we want to be able run make dist without being required to
+# add a bogus NEWS entry. In that case, the version string
+# automatically contains a dash, which we also let disable gnits.
+AM_INIT_AUTOMAKE([1.11.1 dist-bzip2]
+ m4_bmatch(m4_defn([AC_PACKAGE_VERSION]), [[-_]],
+ [gnu], [gnits]))