Brian Campbell discovered two security-related problems in gkrellm-newsticker, a plugin for the gkrellm system monitor program, which provides a news ticker from RDF feeds. The Common Vulnerabilities and Exposures project identifies the following problems:
For the stable distribution (woody) these problems have been fixed in version 0.3-3.1.
The old stable distribution (potato) is not affected since it doesn't contain gkrellm-newsticker packages.
For the unstable distribution (sid) these problems is not yet fixed.
We recommend that you upgrade your gkrellm-newsticker package.
MD5 checksums of the listed files are available in the original advisory.