Debian Security Advisory 1278-1 - A buffer overflow has been discovered in the man command that could allow an attacker to execute code as the man user by providing specially crafted arguments to the -H flag. This is likely to be an issue only on machines with the man and mandb programs installed setuid.
a3194a3c1e6d9d1bd3453d9597e8937429dd8ddf9c07441dd7e9ca40327a3d7d