Martin v. Löwis <martin at v.loewis.de> wrote: > On bzip2, I wonder whether > 2.4 should also update to the newer library; +1, I seem to remember of exploits with corrupted data fed to the bz2 decompressor. Giovanni Bajo