found 440632 2.2.23-8 thanks 2.2.23 (in oldstable) is listed as vulnerable http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-5707 and I believe there is still security support for oldstable. Cheers, Dominic. -- Dominic Hargreaves | http://www.larted.org.uk/~dom/ PGP key 5178E2A5 from the.earth.li (keyserver,web,email)