Debian Security Advisory 1063-1 – It was discovered that the Avatar upload feature of FUD Forum, a component of the web based groupware system phpgroupware, does not sufficiently validate uploaded files, which might lead to the execution of injected web script code.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46502/dsa-1063-1.txt
Source: https://packetstormsecurity.com/files/46502/Debian-Linux-Security-Advisory-1063-1.html