+++ This bug was initially created as a clone of Bug #154049 +++ The way sharutils handles temporary files is insecure (as reported by the Debian BTS): http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=302412 The Debian bug contains a patch for this issue.
This issue also affects FC2
it's now fixed in sharutils-4.2.1-22.2.FC3 and sharutils-4.2.1-18.2.FC2
FC3 updates are out, FC2 is no longer supported.