ed
A heap-based buffer overflow was found in GNU ed that allowed
context-dependent or user-assisted attackers to execute arbitrary
code via a long filename (CVE-2008-3916).
This update provides GNU ed 1.0, which is not vulnerable to this issue.
_______________________________________________________________________
References:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2008-3916
_______________________________________________________________________