mt-daapd - several vulnerabilities

Three vulnerabilities have been discovered in the mt-daapd DAAP audio
server (also known as the Firefly Media Server). The Common
Vulnerabilities and Exposures project identifies the following three
problems:

• CVE-2007-5824
  Insufficient validation and bounds checking of the Authorization:
  HTTP header enables a heap buffer overflow, potentially enabling
  the execution of arbitrary code.
• CVE-2007-5825
  Format string vulnerabilities in debug logging within the
  authentication of XML-RPC requests could enable the execution of
  arbitrary code.
• CVE-2008-1771
  An integer overflow weakness in the handling of HTTP POST
  variables could allow a heap buffer overflow and potentially
  arbitrary code execution.

For the stable distribution (etch), these problems have been fixed in
version 0.2.4+r1376-1.1+etch2.

For the unstable distribution (sid), these problems have been fixed in
version 0.9~r1696-1.4.

We recommend that you upgrade your mt-daapd package.