[Secure-testing-team] Bug#548198: CVE-2009-2905: buffer overflow

[Steffen Joeris]

Package: newt
Severity: grave
Tags: security patch

Hi

There is a buffer overflow in textbox.c. This issue is CVE-2009-2905.

In textbox.c the following patch has been applied.

-       result = malloc(strlen(text) + (strlen(text) / width) + 2);
+       result = malloc(strlen(text) + (strlen(text) / (width - 1)) + 2);

Cheers
Steffen