For the record, 2.4.27 does appear to be vulnerable to CAN-2005-0204 and a fix has been applied to svn. -- Horms