CVE-2009-4029 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2009-4029 Interim 1 25 2023-07-19T01:30:47Z current 2021-05-30T12:49:19Z 2023-07-19T01:30:47Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2009-4029 The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2013-August/000578.html E-Mail link for SUSE-SU-2013:1329-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 SUSE Linux Enterprise Module for Basesystem 15 SP1 SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Basesystem 15 SP3 openSUSE Leap 15.0 openSUSE Tumbleweed automake-1.10.1-4.131.9.1 automake-1.13.4-4.56 automake-1.13.4-6.2 automake-1.15-4.6 automake-1.15.1-2.145 cppi-1.18-2.4 cppi-lang-1.18-2.4 m4-1.4.16-15.67 m4-1.4.16-15.74 m4-1.4.17-5.7 m4-1.4.18-2.138 m4-1.4.18-lp150.2.41 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Desktop 12 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Desktop 12 SP1 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Desktop 12 SP2 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Desktop 12 SP3 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Desktop 12 SP4 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise High Performance Computing 12 SP5 automake-1.15.1-2.145 as a component of SUSE Linux Enterprise Module for Basesystem 15 m4-1.4.18-2.138 as a component of SUSE Linux Enterprise Module for Basesystem 15 automake-1.15.1-2.145 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 m4-1.4.18-2.138 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 automake-1.15.1-2.145 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 m4-1.4.18-2.138 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 automake-1.15.1-2.145 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP3 automake-1.10.1-4.131.9.1 as a component of SUSE Linux Enterprise Server 11 SP4 automake-1.13.4-4.56 as a component of SUSE Linux Enterprise Server 12 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 automake-1.13.4-4.56 as a component of SUSE Linux Enterprise Server 12 SP1 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 SP1 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Server 12 SP2 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 SP2 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Server 12 SP3 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 SP3 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Server 12 SP4 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 SP4 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Server 12 SP5 m4-1.4.16-15.74 as a component of SUSE Linux Enterprise Server 12 SP5 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 m4-1.4.16-15.67 as a component of SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 automake-1.10.1-4.131.9.1 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 automake-1.13.4-4.56 as a component of SUSE Linux Enterprise Software Development Kit 12 automake-1.13.4-4.56 as a component of SUSE Linux Enterprise Software Development Kit 12 SP1 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 automake-1.13.4-6.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 m4-1.4.18-lp150.2.41 as a component of openSUSE Leap 15.0 automake-1.15-4.6 as a component of openSUSE Tumbleweed cppi-1.18-2.4 as a component of openSUSE Tumbleweed cppi-lang-1.18-2.4 as a component of openSUSE Tumbleweed m4-1.4.17-5.7 as a component of openSUSE Tumbleweed The (1) dist or (2) distcheck rules in GNU Automake 1.11.1, 1.10.3, and release branches branch-1-4 through branch-1-9, when producing a distribution tarball for a package that uses Automake, assign insecure permissions (777) to directories in the build tree, which introduces a race condition that allows local users to modify the contents of package files, introduce Trojan horse programs, or conduct other attacks before the build is complete. CVE-2009-4029 SUSE Linux Enterprise Desktop 12:m4-1.4.16-15.74 SUSE Linux Enterprise Desktop 12 SP1:m4-1.4.16-15.74 SUSE Linux Enterprise Desktop 12 SP2:m4-1.4.16-15.74 SUSE Linux Enterprise Desktop 12 SP3:m4-1.4.16-15.74 SUSE Linux Enterprise Desktop 12 SP4:m4-1.4.16-15.74 SUSE Linux Enterprise High Performance Computing 12 SP5:automake-1.13.4-6.2 SUSE Linux Enterprise High Performance Computing 12 SP5:m4-1.4.16-15.74 SUSE Linux Enterprise Module for Basesystem 15:automake-1.15.1-2.145 SUSE Linux Enterprise Module for Basesystem 15:m4-1.4.18-2.138 SUSE Linux Enterprise Module for Basesystem 15 SP1:automake-1.15.1-2.145 SUSE Linux Enterprise Module for Basesystem 15 SP1:m4-1.4.18-2.138 SUSE Linux Enterprise Module for Basesystem 15 SP2:automake-1.15.1-2.145 SUSE Linux Enterprise Module for Basesystem 15 SP2:m4-1.4.18-2.138 SUSE Linux Enterprise Module for Basesystem 15 SP3:automake-1.15.1-2.145 SUSE Linux Enterprise Server 11 SP4:automake-1.10.1-4.131.9.1 SUSE Linux Enterprise Server 12:automake-1.13.4-4.56 SUSE Linux Enterprise Server 12:m4-1.4.16-15.74 SUSE Linux Enterprise Server 12 SP1:automake-1.13.4-4.56 SUSE Linux Enterprise Server 12 SP1:m4-1.4.16-15.74 SUSE Linux Enterprise Server 12 SP2:automake-1.13.4-6.2 SUSE Linux Enterprise Server 12 SP2:m4-1.4.16-15.74 SUSE Linux Enterprise Server 12 SP3:automake-1.13.4-6.2 SUSE Linux Enterprise Server 12 SP3:m4-1.4.16-15.74 SUSE Linux Enterprise Server 12 SP4:automake-1.13.4-6.2 SUSE Linux Enterprise Server 12 SP4:m4-1.4.16-15.74 SUSE Linux Enterprise Server 12 SP5:automake-1.13.4-6.2 SUSE Linux Enterprise Server 12 SP5:m4-1.4.16-15.74 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:automake-1.13.4-6.2 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2:m4-1.4.16-15.67 SUSE Linux Enterprise Software Development Kit 11 SP4:automake-1.10.1-4.131.9.1 SUSE Linux Enterprise Software Development Kit 12:automake-1.13.4-4.56 SUSE Linux Enterprise Software Development Kit 12 SP1:automake-1.13.4-4.56 SUSE Linux Enterprise Software Development Kit 12 SP2:automake-1.13.4-6.2 SUSE Linux Enterprise Software Development Kit 12 SP3:automake-1.13.4-6.2 SUSE Linux Enterprise Software Development Kit 12 SP4:automake-1.13.4-6.2 SUSE Linux Enterprise Software Development Kit 12 SP5:automake-1.13.4-6.2 openSUSE Leap 15.0:m4-1.4.18-lp150.2.41 openSUSE Tumbleweed:automake-1.15-4.6 openSUSE Tumbleweed:cppi-1.18-2.4 openSUSE Tumbleweed:cppi-lang-1.18-2.4 openSUSE Tumbleweed:m4-1.4.17-5.7 moderate 4.4 AV:L/AC:M/Au:N/C:P/I:P/A:P