A race condition in MandrakeUpdate allows local users to modify RPM files while they are in the /tmp directory before they are installed.
Related posts