Jari, The arj package is missing a number of security packages carried by other distributions:
http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security_format.patch http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-afl.patch http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-dir.patch http://pkgs.fedoraproject.org/cgit/arj.git/plain/arj-3.10.22-security-traversal-symlink.patch There are other patches in that repo which you may wish to consider as well. -- Yaakov
