File newt-CVE-2009-2905.patch of Package newt
Index: textbox.c
===================================================================
--- textbox.c.orig
+++ textbox.c
@@ -177,7 +177,7 @@ static void doReflow(const char * text,
if (resultPtr) {
/* XXX I think this will work */
- result = malloc(strlen(text) + (strlen(text) / width) + 2);
+ result = malloc(strlen(text) + (strlen(text) / ( width - 1 )) + 2);
*result = '\0';
}