CVE-2009-4135

Publication date 11 December 2009

Last updated 24 July 2024

Ubuntu priority

Low

Why this priority?

The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.

Status

Package Ubuntu Release Status
coreutils 14.10 utopic
Not affected
14.04 LTS trusty
Not affected
13.10 saucy Ignored end of life
13.04 raring Ignored end of life
12.10 quantal Ignored end of life
12.04 LTS precise
Not affected
11.10 oneiric Ignored end of life
11.04 natty Ignored end of life
10.10 maverick Ignored end of life
10.04 LTS lucid
Fixed 7.4-2ubuntu3.1
9.10 karmic Ignored end of life
9.04 jaunty Ignored end of life
8.10 intrepid Ignored end of life, was needed
8.04 LTS hardy Ignored end of life
6.06 LTS dapper Ignored end of life

Patch details

For informational purposes only. We recommend not to cherry-pick updates. How can I get the fixes?

Package Patch details
coreutils

References

Related Ubuntu Security Notices (USN)

    • USN-2473-1
    • coreutils vulnerabilities
    • 14 January 2015

Other references