Log Message: plug integer overflows in skin handling (CVE-2007-0653, CVE-2007-0654), patch from Debian