Secunia Research, advisory SA37232 and CVE CVE-2009-1570. Patch from upstream git. ok giovanni@ (MAINTAINER)