----------------------------------------------------------------------

Bist Du interessiert an einem neuen Job in IT-Sicherheit?


Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT-
Sicherheit:
http://secunia.com/secunia_vacancies/

----------------------------------------------------------------------

TITLE:
Mandriva update for cpio

SECUNIA ADVISORY ID:
SA16019

VERIFY ADVISORY:
http://secunia.com/advisories/16019/

CRITICAL:
Less critical

IMPACT:
Security Bypass, Manipulation of data

WHERE:
>From remote

OPERATING SYSTEM:
Mandrakelinux 10.1
http://secunia.com/product/4198/
Mandrakelinux 10.0
http://secunia.com/product/3918/
Mandrake Corporate Server 2.x
http://secunia.com/product/1222/

DESCRIPTION:
Mandriva has issued an update for cpio. This fixes a vulnerability,
which can be exploited by malicious people to cause files to be
unpacked to arbitrary locations on a user's system.

For more information:
SA7745

This update also fixes a race condition when setting file
permissions.

SOLUTION:
Apply updated packages.

Mandrakelinux 10.0:

5e09657806ea7779182c7e5a49c22be8
10.0/RPMS/cpio-2.5-4.2.100mdk.i586.rpm
407b3cef16e5d7153c3af0a685df7109
10.0/SRPMS/cpio-2.5-4.2.100mdk.src.rpm

Mandrakelinux 10.0/AMD64:

4a1947f3c7fc27f0b6cc0d9bdf97cfd8
amd64/10.0/RPMS/cpio-2.5-4.2.100mdk.amd64.rpm
407b3cef16e5d7153c3af0a685df7109
amd64/10.0/SRPMS/cpio-2.5-4.2.100mdk.src.rpm

Mandrakelinux 10.1:

c808f5a1689a006e9049e1d8a37ede70
10.1/RPMS/cpio-2.5-4.3.101mdk.i586.rpm
907e5f404afe7cdd649f8aeaa8444914
10.1/SRPMS/cpio-2.5-4.3.101mdk.src.rpm

Mandrakelinux 10.1/X86_64:

71ab78c534f9552ad081c625e92afb45
x86_64/10.1/RPMS/cpio-2.5-4.3.101mdk.x86_64.rpm
907e5f404afe7cdd649f8aeaa8444914
x86_64/10.1/SRPMS/cpio-2.5-4.3.101mdk.src.rpm

Corporate Server 2.1:

fe2a5bdd208f9ce6fcf87b90a87dbbdf
corporate/2.1/RPMS/cpio-2.5-4.2.C21mdk.i586.rpm
950d0f7e96d109e965fb9d6d8f500813
corporate/2.1/SRPMS/cpio-2.5-4.2.C21mdk.src.rpm

Corporate Server 2.1/X86_64:

826500d3531ce8aff99afaf97eb8a8a7
x86_64/corporate/2.1/RPMS/cpio-2.5-4.2.C21mdk.x86_64.rpm
950d0f7e96d109e965fb9d6d8f500813
x86_64/corporate/2.1/SRPMS/cpio-2.5-4.2.C21mdk.src.rpm

ORIGINAL ADVISORY:
http://www.mandriva.com/security/advisories?name=MDKSA-2005:116

OTHER REFERENCES:
SA7745:
http://secunia.com/advisories/7745/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------