GDAL before 1.3.0-r1 allows local users in the portage group to increase privileges via a shared object in the Portage temporary build directory, which is added to the search path allowing objects in it to be loaded at runtime.
http://www.vupen.com/english/advisories/2005/2281
http://www.securityfocus.com/bid/15120