> Package xmlrpc-c-ss-1.16.42 has a denial-of-service vulnerability. It > is also four years old. Is there any reason we don't upgrade it to > 1.32? Just updated to 1.16.43. We use a super-stable branch, that's why it's not 1.32. Cheers, Adam