Gentoo Linux Security Advisory GLSA 200803-04 – seiji reported that the filename for the uploaded file in bug_report.php is not properly sanitized before being stored. Versions less than 1.0.8-r1 are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64213/glsa-200803-04.txt
Source: https://packetstormsecurity.com/files/64213/Gentoo-Linux-Security-Advisory-200803-4.html