On the topic of Security fixes and 2.4's upstream. Dann, myself, and all others involved endeavour to push any patches we find that are missing from upstream to the relevant parties. This includes 2.4 and 2.6, security and non-security patches. Marcelo has specifically asked vendors (and others) to keep doing this for 2.4. So if you have patches for critical bugs, please forward them on - he can decide to drop or keep them. -- Horms