LinuxSecurity.com: An incomplete fix for CVE-2008-2713 resulted in remote attackers being able to cause a denial of service via a malformed Petite file that triggered an out-of-bounds memory access (CVE-2008-3215). This issue is corrected with the 0.93.3 release which is being provided.
Original Source: http://www.linuxsecurity.com/content/view/141150?rdf