Hi, Security focus list a remote buffer overflow vulnerability. http://www.securityfocus.com/bid/17178 I can't find a CVE for it yet, so I cant see if you've got it under control on your subversion patch tracking page. Do you think it likely that a DSA will get fast tracked for this? -- Geoff Crompton Debian System Administrator Strategic Data +61 3 9340 9000