pam-python before 1.0.7-1 has an issue in regard to the default environment
variable handling of Python, which could allow for local root escalation in
certain PAM setups.

Malte Kraus discovered that Pam-python mishandled certain environment
variables. A local attacker could potentially use this vulnerability to
execute programs as root.