On Tue, Jul 15, 2014 at 10:56 AM, Bryan O'Sullivan <bos@serpentine.com> wrote:

attoparsec has some security fixes in recent releases that depend on the scientific package. It would be a very bad idea to continue with 0.10.4.0.

This is rather late to hear this... given that I plan to Alpha this weekend or sooner.

Can you quantify the security fixes? Do they only revolve around floats?