Hi, I made a [1]package for stable that will close the bug. And i've contacted the Security Team, but since there is no code injection they consider it a normal bug, so i probably it will be uploaded to stable-proposed.
However i didn't finished yet with the tests, so i'm not pretty sure that the bug is really closed (and the package didn't introduce new bugs), I expect to do that this weekend. [1] http://debian.eviled.org/svn/bzip2/build-area/bzip2_1.0.3-7.diff.gz Cheers, -- ·''`. Luis : :' : http://eviled.org `. `' `-