CVE-2009-2957 and CVE-2009-2958 relating to tftp (these were fixed in 2.50; we had them as patches in -current before). ok rui@