Hi, On Tue, October 23, 2007 10:04, Martin Zobel-Helas wrote: >> As I still haven't received a reply from the security team, I think we >> can assume the answer is "no". > > Security team, please comment on that. I see that the outcome of discussion inside the team hasn't been relayed to -release. The conclusion is that there will not be a DSA for this issue. Sorry for the delay. Thijs