CVE-2011-1920: The make include files in NetBSD before 1.6.2, as used in pmake 1.111 and other products, allow local users...

Security readout for executives and security teams

This is an old local file-overwrite issue in NetBSD make include files used by pmake. A local user on an affected shared build system could abuse predictable temporary files to overwrite files. It is not described as remotely exploitable, and the provided sources do not show active exploitation. Exposure is most likely on legacy Unix or build environments using vulnerable NetBSD make include files or pmake 1.111. Modern systems are unlikely to be affected unless they retain old pmake packaging or copied NetBSD mk files. Treat this as a legacy build-host hygiene issue, not an internet-facing emergency. Prioritize if affected tooling runs on shared systems, handles privileged builds, or remains in long-lived build images. Mitigation focus: Inventory systems using pmake or copied NetBSD bsd.lib.mk and bsd.prog.mk files.; Apply vendor updates that include the NetBSD make include file fixes where available.; Avoid running affected make depend workflows as privileged users on shared systems..

Prepared

Jun 28, 2026, 01:17 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.