It's quite odd that a bug that old (133 days already) is being ignored and the _stable_ version of Debian still contains flaws... Whom do we need to bribe in order for the fix to get into sarge/security ? Mihai