Red Hat’s security update to gnorpm

From an advisory at LWN.net: “A locally-exploitable security hole was found where a normal user could
trick root running GnoRPM into writing to arbitrary files due to a bug in
the gnorpm tmp file handling.”