Home
Reading
Searching
Subscribe
Sponsors
Statistics
Posting
Contact
Spam
Lists
Links
About
Hosting
Filtering
Features Download
Marketing
Archives
FAQ
Blog
 
Gmane
From: Pat Riehecky <riehecky-13hema8v3vg <at> public.gmane.org>
Subject: Security ERRATA Low: automake on SL6.x (noarch)
Newsgroups: gmane.linux.scientific.errata
Date: Thursday 28th February 2013 22:17:04 UTC (over 3 years ago)
Synopsis:          Low: automake security update
Issue Date:        2013-02-21
CVE Numbers:       CVE-2012-3386
--

It was found that the distcheck rule in Automake-generated Makefiles made a
directory world-writable when preparing source archives. If a malicious, 
local
user could access this directory, they could execute arbitrary code with
the
privileges of the user running "make distcheck". (CVE-2012-3386)
--

SL6
   noarch
     automake-1.11.1-4.el6.noarch.rpm

- Scientific Linux Development Team
 
CD: 3ms