Thanks for the link, I somehow missed that batch of CVEs...
Yeah, current builds should use a saner-ish version, I'll probably tweak the delegates config just to be safe, though
.
As was mentioned, irrelevant for vanilla devices, though, I'm not even sure IM is actually used by anything (it used to (or still does?) live in /usr/local, which should tell you something
).