I believe the copy of ltdl.c that ships with pdsh has a security vulnerability:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3736
However, the way that pdsh uses it appears to be safe. Since, pdsh only calls lt_dlopen on a fixed directory that is only writeable by root, the vulnerability cannot be exploited.
Still, it would probably be a good idea to pull a copy of ltdl.c...
