Debian Security Advisory 1032-1: It was discovered that the Plone content management system lacks security declarations for three internal classes. This allows manipulation of user portraits by unprivileged users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/45477/dsa-1032-1.txt
Source: https://packetstormsecurity.com/files/45477/Debian-Linux-Security-Advisory-1032-1.html