Debian Security Advisory 1420-1 - Bas van Schaik discovered that the agentd process of Zabbix, a network monitor system, may run user-supplied commands as group id root, not zabbix, which may lead to a privilege escalation.
d23d17f90a2adf746f2242041c32d79d54e57c8fc7b7d073a784c2b395e16d41