Erik Sjölund discovered that zhcon, a fast console CJK system using
the Linux framebuffer, accesses a user-controlled configuration file
with elevated privileges Thus, it is possible to read arbitrary
files
For the stable distribution (woody) this problem has been fixed in
version 02-4woody3
For the unstable distribution (sid) this problem wil ...