Secunia Security Advisory – Red Hat has issued an update for cpio. This fixes a vulnerability, which can be exploited by by malicious, local users to disclose and manipulate information. The problem is that output files are created with insecure permissions, which makes it possible for other users to read and manipulate the contents. This update also fixes a race condition when setting file permissions.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/41470/sa17532.txt
Source: https://packetstormsecurity.com/files/41470/Secunia-Security-Advisory-17532.html