dia - programming error

“infamous41md” discovered three buffer overflow errors in the xfig
import code of dia, a diagram editor, that can lead to the execution
of arbitrary code.

For the old stable distribution (woody) these problems have been fixed in
version 0.88.1-3woody1.

For the stable distribution (sarge) these problems have been fixed in
version 0.94.0-7sarge3.

For the unstable distribution (sid) these problems have been fixed in
version 0.94.0-18.

We recommend that you upgrade your dia package.