GNU Libtool is a set of shell scripts which automatically configure UNIX,Linux, and similar operating systems to generically build shared libraries.A flaw was found in the way GNU Libtool's libltdl library looked formodules to load. It was possible for libltdl to load and run modules froman arbitrary library in the current working directory. If a local attackercould trick a local user into running an application (which uses libltdl)from an attacker-controlled directory containing a malicious Libtoolcontrol file (.la), the attacker could possibly execute arbitrary code withthe privileges of the user running the application. (CVE-2009-3736)All libtool users should upgrade to these updated packages, which containa backported patch to correct this issue. After installing the updatedpackages, applications using the libltdl library must be restarted for theupdate to take effect.