Security fix diffs for 2.x

[Scott Cantor]

Ferenc Wagner wrote on 2009-11-23:
> That's what I tried first, then realized that it won't work with a
> static function.

I guess I'd have to see the warning, I can't think why a static function
can't be declared in a header and defined in only one of the object files
without being externally visible.

> Reading your answer it eventually dawned on me that
> you meant static class members, not static free functions.  I'll remove
> the static declaration and go the original route; this will add a new
> external symbol but who cares.

Not on Unix, anyway, no. I don't see why it needs to be external though.

> Fair enough.  If you prefer to do the tests yourself, that's also fine
> with me, just describe the required setup.  Otherwise I'll come back at
> you when the fixed packages are built.

Just ping me when you need something. It's no great secret, but no reason to
spread things more widely than needed.

-- Scott