automake-1.11.1-4.AXS4

エラータID: AXSA:2013-199:01

Release date: 
Tuesday, March 19, 2013 - 13:50
Subject: 
automake-1.11.1-4.AXS4
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

Automake is a tool for automatically generating `Makefile.in' files compliant with the GNU Coding Standards.

You should install Automake if you are developing software and would like to use its ability to automatically generate GNU standard Makefiles. If you install Automake, you will also need to install GNU's Autoconf package.

Security issues fixed with this release:

• CVE-2012-3386
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.

Solution: 

Update packages.

CVEs: 
CVE-2012-3386
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.


Additional Info: 

N/A

Download: 

SRPMS
  1. automake-1.11.1-4.AXS4.src.rpm
    MD5: 8b512d3259fa42bcfa83cb0ef4f2c1d7
    SHA-256: a071c25cffb6ea80a5b0761d6353198cb3944a0076d5c0a0d00bef4537dc0f9d
    Size: 1.04 MB

Asianux Server 4 for x86
  1. automake-1.11.1-4.AXS4.noarch.rpm
    MD5: e2e33f5b54895b47a121bd912c1f5956
    SHA-256: 3c8b5523ec77795a8a0900f0ca9fabc280f3a11b298a8ab716190de27d3638a1
    Size: 549.59 kB

Asianux Server 4 for x86_64
  1. automake-1.11.1-4.AXS4.noarch.rpm
    MD5: 57fe27ebb7c1ad78a062fe48fbf25e22
    SHA-256: 5c00d59f8576e3ff670faf66c893620fad9ac69a206ee7c630235b4bb5037940
    Size: 549.16 kB