Quoting Matthias Saou <thias@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx>: > Warren Togami wrote : > > I'm actually _using_ mpg321 in production on some RH7.3 servers, as it is > required to play sound files for some of our IVR developments based on > asterisk. So crippling an update _would_ bother me. > > I think the package should be updated, or just left as-is if the > vulnerability is minor, but not "crippled" in any way. agreed, I dont anymore, but I used to maintain a similair setup for a broadcasting company. Maarten Stolte