Mailing the story:
Debian alert: New xbl packages fix buffer overflow
Another buffer overflow was discovered in xbl, distinct from the one
addressed in DSA-327 (CAN-2003-0451), involving the -display command
line option. This vulnerability could be exploited by a local
attacker to gain gid 'games'.