Debian has issued an update for netrik. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to Netrik generating insecure temporary file names when editing <textarea> fields. This can be exploited to execute arbitrary shell commands by e.g. tricking a user into editing a specially crafted <textarea> field.

Solution
Apply updated packages.
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers