The remote host is missing an update to libvorbis announced via advisory DSA 2412-1.

https://secure1.securityspace.com/smysecure/catid.html?in=DSA%202412-1

It was discovered that a heap overflow in the Vorbis audio compression library could lead to the execution of arbitrary code if a malformed Ogg Vorbis file is processed. For the stable distribution (squeeze), this problem has been fixed in version 1.3.1-1+squeeze1. For the unstable distribution (sid), this problem will be fixed soon. We recommend that you upgrade your libvorbis packages.