diff -u alien-arena-7.0/debian/changelog alien-arena-7.0/debian/changelog
--- alien-arena-7.0/debian/changelog
+++ alien-arena-7.0/debian/changelog
@@ -1,3 +1,11 @@
+alien-arena (7.0-1+lenny1) unstable; urgency=low
+
+  * Non-maintainer upload by the security team.
+  * Fixes remote arbitrary code execution, CVE-2009-3637
+    (closes: #552038).
+
+ -- Michael Gilbert <michael.s.gilbert@gmail.com>  Tue, 29 Dec 2009 19:06:05 -0500
+
 alien-arena (7.0-1) unstable; urgency=low
 
   [ Barry deFreese ]
diff -u alien-arena-7.0/debian/patches/series alien-arena-7.0/debian/patches/series
--- alien-arena-7.0/debian/patches/series
+++ alien-arena-7.0/debian/patches/series
@@ -7,0 +8 @@
+cve-2009-3637.patch
only in patch2:
unchanged:
--- alien-arena-7.0.orig/.pc/.version
+++ alien-arena-7.0/.pc/.version
@@ -0,0 +1 @@
+2
only in patch2:
unchanged:
--- alien-arena-7.0.orig/debian/patches/cve-2009-3637.patch
+++ alien-arena-7.0/debian/patches/cve-2009-3637.patch
@@ -0,0 +1,12 @@
+--- a/source/client/menu.c	2009/06/23 19:14:36	1390
++++ b/source/client/menu.c	2009/06/24 04:29:44	1391
+@@ -3058,8 +3058,8 @@
+ 		else if (!_stricmp (lasttoken, "maxclients"))
+ 			Com_sprintf(mservers[m_num_servers].maxClients, sizeof(mservers[m_num_servers].maxClients), "%s", token);
+ 
+-		/* Get next token: */
+-		strcpy (lasttoken, token);
++		/* Get next token: */	
++		Com_sprintf(lasttoken, sizeof(lasttoken), "%s", token);
+ 		token = strtok( NULL, seps );
+ 	}