Hi, Upstream provided me with the following gist against 2.6.18 that fixes this vulnerability: https://gist.github.com/stahnma/d7598b49a4abc07845b9 Haven't checked how much backporting is needed. Cheers, -- Raphael Geissert - Debian Developer www.debian.org - get.debian.net