Debian Security Advisory 1251-1 - It has been discovered that netrik, a text mode WWW browser with vi like keybindings, doesn't properly sanitize temporary filenames when editing textareas which could allow attackers to execute arbitrary commands via shell metacharacters.
b1a35ff7b5a13c4460f8c080ce5fa76d08cdbc08e8ba30ec7d6b595aba91c454