Hi, I've just noticed that this security bug has not been fixed: #332919: CAN-2005-2967: Format string vulnerability in xine-lib's CDDB response parsing Any action taken? Cheers, -- Jérôme Marant