eggdrop - several vulnerabilities

Several vulnerabilities have been discovered in eggdrop, an advanced IRC
robot. The Common Vulnerabilities and Exposures project identifies the
following problems:

• CVE-2007-2807
  It was discovered that eggdrop is vulnerable to a buffer overflow, which
  could result in a remote user executing arbitrary code. The previous DSA
  (DSA-1448-1) did not fix the issue correctly.
• CVE-2009-1789
  It was discovered that eggdrop is vulnerable to a denial of service
  attack, that allows remote attackers to cause a crash via a crafted
  PRIVMSG.

For the stable distribution (lenny), these problems have been fixed in
version 1.6.19-1.1+lenny1.

For the old stable distribution (etch), these problems have been fixed in
version 1.6.18-1etch2.

For the unstable distribution (sid), this problem has been fixed in
version 1.6.19-1.2

We recommend that you upgrade your eggdrop package.