Please review patch for #2810

[Martin Pitt]

Hi fellows!

Today I created a patch for security bug #2810 (direct link: 
https://bugzilla.ubuntulinux.org/attachment.cgi?id=626).

Since I did not find any patches from other distributions and people,
I would like to get some more eyes on it before I upload.

The original announcement is on 

  http://www.securityfocus.com/archive/1/379382

However, while doing the patch I discovered some more vulnerabilities,
which I fixed as well. Please see the changelog (included in the
interdiff patch).

Thanks a lot in advance!

Martin
-- 
Martin Pitt                       http://www.piware.de
Ubuntu Developer            http://www.ubuntulinux.org
Debian GNU/Linux Developer       http://www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.ubuntu.com/archives/ubuntu-devel/attachments/20041028/953391b0/attachment.pgp