Debian Security Advisory DSA 656-1 (vdr)

Summary
The remote host is missing an update to vdr announced via advisory DSA 656-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%20656-1
Insight
Javier Fernández-Sanguino Peña from the Debian Security Audit Team has discovered that the vdr daemon which is used for video disk recorders for DVB cards can overwrite arbitrary files. For the stable distribution (woody) this problem has been fixed in version 1.0.0-1woody2. For the unstable distribution (sid) this problem has been fixed in version 1.2.6-6. We recommend that you upgrade your vdr package.