Mandriva Security Advisory MDVSA-2009:341 (dstat)

Summary
The remote host is missing an update to dstat announced via advisory MDVSA-2009:341.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:341
Insight
Multiple vulnerabilities has been found and corrected in dstat: Multiple untrusted search path vulnerabilities in dstat before 0.7.0 allow local users to gain privileges via a Trojan horse Python module in (1) the current working directory or (2) a certain subdirectory of the current working directory (CVE-2009-3894, CVE-2009-4081). This update provides a solution to these vulnerabilities. Affected: Corporate 4.0