(RHSA-2011:0265) Low: ccs security update

The Cluster Configuration System provides the ability for nodes in a
cluster to obtain information about the cluster and each other. ccs_tool is
a program for making online updates to the cluster configuration file.

An insecure temporary file use flaw was found in ccs_tool. A local attacker
could use this flaw to conduct a symbolic link attack, allowing them to
overwrite (with the output of ccs_tool) an arbitrary file writable by the
victim running ccs_tool. (CVE-2008-6552)

All ccs users should upgrade to these updated packages, which correct this
issue.