[gforge arbitrary code execution through viewFile.php]
viewFile.php has been removed along with other files in -26, so Debian is
no longer affected.