Fedora 13 : gromacs-4.5.2-2.fc13 (2010-17256)

Fix upgrade path issue caused by branching of libs. Upgrade to 4.5.2, fixing CVE-2010-4001 and a bunch of other bugs. See full release notes at http://www.gromacs.org/AboutGromacs/ReleaseNotes/Versions4.5.x . Note that Tenable Network Security has extracted the preceding description block directl...

Fedora 14 : gromacs-4.5.2-2.fc14 (2010-17248)

Fix upgrade path issue caused by branching of libs. Upgrade to 4.5.2, fixing CVE-2010-4001 and a bunch of other bugs. See full release notes at http://www.gromacs.org/AboutGromacs/ReleaseNotes/Versions4.5.x . Note that Tenable Network Security has extracted the preceding description block directl...

CVE-2010-4001

CVE-2010-4001 affects GMXRC.bash in Gromacs 4.5.1 and earlier, where a zero-length directory name can be placed in LD_LIBRARY_PATH, enabling local privilege escalation via a Trojan horse shared library in the current working directory. The issue is discussed in vendor advisories and OpenVAS/Nessu...