Debian Linux Security Advisory 2805-1 - joernchen of Phenoelit discovered two command injection flaws in Sup, a console-based email client. An attacker might execute arbitrary command if the user opens a maliciously crafted email.
5739388c0a7982317759271534e33911f76ce90521112509c624b3d0475a21c3