security/trousers -- several vulnerabilities

the TrouSerS project reports reports:

If the tcsd daemon is started with root privileges, it fails to
drop the root gid after it is no longer needed.
If the tcsd daemon is started with root privileges, the tss user
has read and write access to the /etc/tcsd.conf file.
If the tcsd daemon is started with root privileges, the creation
of the system.data file is prone to symlink attacks.