Debian Security Advisory DSA 712-1 – Tim Dijkstra discovered a problem during the upgrade of geneweb, a genealogy software with web interface. The maintainer scripts automatically converted files without checking their permissions and content, which could lead to the modification of arbitrary files.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/37784/dsa-712.txt
Source: https://packetstormsecurity.com/files/37784/dsa-712.txt.html