automake: code execution [LWN.net]

Package(s):

automake

CVE #(s):

CVE-2012-3386

Created:

July 12, 2012

Updated:

April 5, 2013

Description:

From the Mandriva advisory:

A vulnerability has been discovered and corrected in automake:

A race condition in automake (lib/am/distdir.am) could allow a local attacker to run arbitrary code with the privileges of the user running make distcheck (CVE-2012-3386).

Alerts:

Mandriva	MDVSA-2012:103	2012-07-12
Slackware	SSA:2012-206-01	2012-07-24
Mageia	MGASA-2012-0193	2012-08-02
Fedora	FEDORA-2012-14349	2012-09-19
Fedora	FEDORA-2012-14297	2012-09-22
Fedora	FEDORA-2012-14779	2012-10-03
Fedora	FEDORA-2012-14770	2012-10-04
openSUSE	openSUSE-SU-2012:1519-1	2012-11-21
Red Hat	RHSA-2013:0526-02	2013-02-21
Oracle	ELSA-2013-0526	2013-02-25
Scientific Linux	SL-auto-20130228	2013-02-28
CentOS	CESA-2013:0526	2013-03-09
Mandriva	MDVSA-2013:018	2013-04-04
Mandriva	MDVSA-2013:031	2013-04-05

(Log in to post comments)