lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  PHC 
Open Source and information security mailing list archives
Hash Suite for Android: free password hash cracker in your pocket
[<prev] [next>] [day] [month] [year] [list]
Date: Wed, 27 Oct 2010 11:03:39 -0400
From: rPath Update Announcements <>
Subject: rPSA-2010-0071-1 automake

rPath Security Advisory: 2010-0071-1
Published: 2010-10-27
    rPath Linux 2

Rating: Informational
Exposure Level Classification:
    Local User Non-deterministic Unauthorized Access
Updated Versions:

rPath Issue Tracking System:


    In previous versions of automake, when producing a distribution
    tarball for a package that uses Automake, insecure permissions
    were assigned to directories in the build tree, which introduces
    a race condition that allows local users to modify the contents of
    package files before the build is complete.  This has been fixed.

Copyright 2010 rPath, Inc.
This file is distributed under the terms of the MIT License.
A copy is available at

Powered by blists - more mailing lists