PHP tempname open_basedir issue http://securityreason.com/achievement_securityalert/36 tempname open_basedir issue. It's possible to break out of your open_basedir restricted path. We've fixed issues similar to this in the past, but did claim it's a case of safe mode not being safe: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=147808 This issue also affects FC4
Fixed in FEDORA-2006-289.