Debian Security Advisory 655-1 – zhcon accesses a user-controlled configuration file with elevated privileges. Thus, it is possible to read arbitrary files.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35895/dsa-655.txt
Source: https://packetstormsecurity.com/files/35895/dsa-655.txt.html