I've just subscribed so if this has already been covered, please excuse me. The Release Critical bug against apache-ssl #134347 is only valid for the unstable distribution and not for testing. Would the procedure be to downgrade the bug or to fix it in unstable? The apache-ssl in testing and unstable is the same, but apache-common-1.3.23 is in unstable and the apache-ssl still requires 1.3.22. Regards, Alwyn