Update to bzip-1.0.5 which fixes CVE-2008-1372.