CVE-2009-4135: Canonical Ubuntu Linux

Medium severity, CVSS 4.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The distcheck rule in dist-check.mk in GNU coreutils 5.2.1 through 8.1 allows local users to gain privileges via a symlink attack on a file in a directory tree under /tmp.

Affected products

• Canonical Ubuntu Linux: version 10.04 only; version 12.04 only; version 14.04 only
• Fedoraproject Fedora: version 11 only; version 12 only
• GNU Coreutils: version 5.2.1 only; version 5.91 only; version 5.92 only; version 5.93 only; version 5.94 only; version 5.95 only; …

Published 2009-12-11. Last modified 2026-06-16.