Debian Security Advisory 1477-1 – Duncan Gilmore discovered that yarssr, an RSS aggregator and reader, performs insufficient input sanitizing, which could result in the execution of arbitrary shell commands if a malformed feed is read.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/63024/dsa-1477-1.txt
Source: https://packetstormsecurity.com/files/63024/Debian-Linux-Security-Advisory-1477-1.html