* Martin Vaeth reported multiple untrusted search path
vulnerabilities (CVE-2008-5843).
* Marcus Meissner of the SUSE Security Team reported that temporary
files are created with a predictable name (CVE-2008-5743).
A local attacker could place a specially crafted Python module in the
current working directory or the /var/tmp directory, and entice a user
to run the PDFjam scripts, leading to the execution of arbitrary code
with the privileges of the user running the application. A local
attacker could also leverage symlink attacks to overwrite arbitrary
files.
