inkscape - buffer overflow

Several vulnerabilities have been discovered in Inkscape, a
vector-based drawing program. The Common Vulnerabilities and
Exposures project identifies the following problems:

• CVE-2005-3737
  Joxean Koret discovered a buffer overflow in the SVG parsing
  routines that can lead to the execution of arbitrary code.
• CVE-2005-3885
  Javier FernĂĄndez-Sanguino PeĂąa noticed that the ps2epsi extension
  shell script uses a hardcoded temporary file making it vulnerable
  to symlink attacks.

The old stable distribution (woody) does not contain inkscape packages.

For the stable distribution (sarge) this problem has been fixed in
version 0.41-4.99.sarge2.

For the unstable distribution (sid) this problem has been fixed in
version 0.42.2+0.43pre1-1.

We recommend that you upgrade your inkscape package.