Lintian before 2.5.12 allows remote attackers to gather information about the "host" system using crafted symlinks.
{ "urgency": "unimportant" }