Debian Security Advisory DSA 827-1 – Moritz Muehlenhoff discovered the handler code for backupninja creates a temporary file with a predictable filename, leaving it vulnerable to a symlink attack.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/40362/dsa-827-1.txt
Source: https://packetstormsecurity.com/files/40362/Debian-Linux-Security-Advisory-827-1.html