Debian Security Advisory 1643-1 - Dmitry E. Oboukhov discovered that the "to-upgrade" plugin of Feta, a simpler interface to APT, dpkg, and other Debian package tools creates temporary files insecurely, which may lead to local denial of service through symlink attacks.
6c3b9b2848574f394f7607e8de2fa8ad427ccbe0710ccd1a000c68ec8be7c450