passwdehd script in pam_mount would allow local users to overwrite
arbitrary files via a symlink attack on a temporary file.
The updated packages have been patched to prevent this.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-5138
_______________________________________________________________________