Debian Security Advisory DSA 806-1 - Marcus Meissner discovered that the cvsbug program from gcvs, the Graphical frontend for CVS, which serves the popular Concurrent Versions System, uses temporary files in an insecure fashion.
22c1553dccc4c94be862c8286a2bfbd11b58c2658a49caf956aae3fdeeaf2596