I've recently noticed CVE-2010-0424 [1] listed in the cron list of "possible security bugs". Yesterday I did a fast review of the bug information (not that much available) and the fix introduced by the Fedora guys (from cronie 1.4.3 to cronie 1.4.4) which is available at [2].