Here are the CVEs:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3520 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3521 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3522
I'm just going to follow the upstream Fedora package on this one, and that doesn't have any patches for these at the moment.
Rich.