CVE-2010-4226 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-4226 Interim 1 36 2023-09-13T02:02:28Z current 2021-05-30T12:54:46Z 2023-09-13T02:02:28Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-4226 cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/opensuse-security-announce/2011-04/msg00000.html E-Mail link for SUSE-SR:2011:005 https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00024.html E-Mail link for SUSE-SU-2017:3253-1 https://lists.opensuse.org/opensuse-updates/2011-03/msg00008.html E-Mail link for openSUSE-SU-2011:0174-1 https://lists.opensuse.org/opensuse-security-announce/2017-12/msg00025.html E-Mail link for openSUSE-SU-2017:3259-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 6 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Real Time 15 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP5 SUSE Linux Enterprise Module for Development Tools 15 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Proxy 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Retail Branch Server 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP4 SUSE Linux Enterprise Module for Development Tools 15 SP1 SUSE Manager Server 4.0 SUSE Linux Enterprise Module for Development Tools 15 SP4 openSUSE Tumbleweed build build-2011.10.10-0.7.10 build-20171128-9.3.2 build-20180329-1.10 build-20190128-3.3.2 build-20210902-1.2 build-initvm-s390-20171128-9.3.2 build-initvm-x86_64-20171128-9.3.2 build-initvm-x86_64-20210902-1.2 build-mkbaselibs build-mkbaselibs-20171128-9.3.2 build-mkbaselibs-20180329-1.10 build-mkbaselibs-20190128-3.3.2 build-mkbaselibs-20210902-1.2 build-mkdrpms-20210902-1.2 obs-service-source_validator-0.7-9.3.1 osc-0.162.0-15.3.1 build-20180329-1.10 as a component of SUSE Linux Enterprise Module for Development Tools 15 build-mkbaselibs-20180329-1.10 as a component of SUSE Linux Enterprise Module for Development Tools 15 build-20190128-3.3.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 build-mkbaselibs-20190128-3.3.2 as a component of SUSE Linux Enterprise Module for Development Tools 15 SP1 build-2011.10.10-0.7.10 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 build-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 build-initvm-s390-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 build-initvm-x86_64-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 build-mkbaselibs-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 obs-service-source_validator-0.7-9.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 osc-0.162.0-15.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP2 build-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 build-initvm-s390-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 build-initvm-x86_64-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 build-mkbaselibs-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 obs-service-source_validator-0.7-9.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 osc-0.162.0-15.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 build-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 build-initvm-x86_64-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 build-mkbaselibs-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 build-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 build-initvm-s390-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 build-initvm-x86_64-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 build-mkbaselibs-20171128-9.3.2 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 obs-service-source_validator-0.7-9.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 osc-0.162.0-15.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP5 build-20210902-1.2 as a component of openSUSE Tumbleweed build-initvm-x86_64-20210902-1.2 as a component of openSUSE Tumbleweed build-mkbaselibs-20210902-1.2 as a component of openSUSE Tumbleweed build-mkdrpms-20210902-1.2 as a component of openSUSE Tumbleweed build as a component of SUSE CaaS Platform 4.0 build-mkbaselibs as a component of SUSE CaaS Platform 4.0 build as a component of SUSE Enterprise Storage 6 build as a component of SUSE Enterprise Storage 7 build as a component of SUSE Enterprise Storage 7.1 build-mkbaselibs as a component of SUSE Enterprise Storage 7.1 build as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS build-mkbaselibs as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS build as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS build-mkbaselibs as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS build as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS build-mkbaselibs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS build as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS build-mkbaselibs as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS build as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 build-mkbaselibs as a component of SUSE Linux Enterprise Module for Development Tools 15 SP4 build as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 build-mkbaselibs as a component of SUSE Linux Enterprise Module for Development Tools 15 SP5 build as a component of SUSE Linux Enterprise Real Time 15 SP3 build-mkbaselibs as a component of SUSE Linux Enterprise Real Time 15 SP3 build as a component of SUSE Linux Enterprise Server 15 SP1-LTSS build-mkbaselibs as a component of SUSE Linux Enterprise Server 15 SP1-LTSS build as a component of SUSE Linux Enterprise Server 15 SP2-LTSS build-mkbaselibs as a component of SUSE Linux Enterprise Server 15 SP2-LTSS build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 build-mkbaselibs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 build-mkbaselibs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 build as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 build-mkbaselibs as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 build as a component of SUSE Manager Proxy 4.0 build as a component of SUSE Manager Retail Branch Server 4.0 build as a component of SUSE Manager Server 4.0 cpio, as used in build 2007.05.10, 2010.07.28, and possibly other versions, allows remote attackers to overwrite arbitrary files via a symlink within an RPM package archive. CVE-2010-4226 SUSE Linux Enterprise Module for Development Tools 15:build-20180329-1.10 SUSE Linux Enterprise Module for Development Tools 15:build-mkbaselibs-20180329-1.10 SUSE Linux Enterprise Module for Development Tools 15 SP1:build-20190128-3.3.2 SUSE Linux Enterprise Module for Development Tools 15 SP1:build-mkbaselibs-20190128-3.3.2 SUSE Linux Enterprise Software Development Kit 11 SP4:build-2011.10.10-0.7.10 SUSE Linux Enterprise Software Development Kit 12 SP2:build-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP2:build-initvm-s390-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP2:build-initvm-x86_64-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP2:build-mkbaselibs-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP2:obs-service-source_validator-0.7-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP2:osc-0.162.0-15.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:build-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP3:build-initvm-s390-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP3:build-initvm-x86_64-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP3:build-mkbaselibs-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP3:obs-service-source_validator-0.7-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP3:osc-0.162.0-15.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:build-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP4:build-initvm-x86_64-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP4:build-mkbaselibs-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP5:build-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP5:build-initvm-s390-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP5:build-initvm-x86_64-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP5:build-mkbaselibs-20171128-9.3.2 SUSE Linux Enterprise Software Development Kit 12 SP5:obs-service-source_validator-0.7-9.3.1 SUSE Linux Enterprise Software Development Kit 12 SP5:osc-0.162.0-15.3.1 openSUSE Tumbleweed:build-20210902-1.2 openSUSE Tumbleweed:build-initvm-x86_64-20210902-1.2 openSUSE Tumbleweed:build-mkbaselibs-20210902-1.2 openSUSE Tumbleweed:build-mkdrpms-20210902-1.2 SUSE Manager Proxy 4.0:build SUSE Manager Retail Branch Server 4.0:build SUSE Manager Server 4.0:build SUSE CaaS Platform 4.0:build SUSE CaaS Platform 4.0:build-mkbaselibs SUSE Enterprise Storage 6:build SUSE Enterprise Storage 7.1:build SUSE Enterprise Storage 7.1:build-mkbaselibs SUSE Enterprise Storage 7:build SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:build SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:build-mkbaselibs SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:build SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:build-mkbaselibs SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:build SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:build-mkbaselibs SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:build SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:build-mkbaselibs SUSE Linux Enterprise Module for Development Tools 15 SP4:build SUSE Linux Enterprise Module for Development Tools 15 SP4:build-mkbaselibs SUSE Linux Enterprise Module for Development Tools 15 SP5:build SUSE Linux Enterprise Module for Development Tools 15 SP5:build-mkbaselibs SUSE Linux Enterprise Real Time 15 SP3:build SUSE Linux Enterprise Real Time 15 SP3:build-mkbaselibs SUSE Linux Enterprise Server 15 SP1-LTSS:build SUSE Linux Enterprise Server 15 SP1-LTSS:build-mkbaselibs SUSE Linux Enterprise Server 15 SP2-LTSS:build SUSE Linux Enterprise Server 15 SP2-LTSS:build-mkbaselibs SUSE Linux Enterprise Server for SAP Applications 15 SP1:build SUSE Linux Enterprise Server for SAP Applications 15 SP1:build-mkbaselibs SUSE Linux Enterprise Server for SAP Applications 15 SP2:build SUSE Linux Enterprise Server for SAP Applications 15 SP2:build-mkbaselibs SUSE Linux Enterprise Server for SAP Applications 15 SP3:build SUSE Linux Enterprise Server for SAP Applications 15 SP3:build-mkbaselibs moderate 5 AV:N/AC:L/Au:N/C:N/I:P/A:N