Bug#286379: lintian: Insecure temporary directory usage

[Florian Weimer <fw@deneb.enyo.de>]

* Jeroen van Wolffelaar:

> FWIW, maintainers of lintian can always be mailed privately about
> security issues, so that this could have been fixed in a timely matter.
> I never got any mail about this issue.

Debian guidelines discourage contacting the maintainers with security
holes:

<http://www.debian.org/security/faq#care>

(These instructions are somehwat inconsistent.  For sid, you are
supposed to work directly with upstream and/or packages maintainers
AFAIK because the security team does not really have the resources to
deal with sid, too.)

OTOH, the Social Contract does not really propagate the secret filing
of security bugs.  (Yeah, I know, we have some disagreement, no need
to rehash the old discussion.)