On Tue, Oct 15, 2002 at 08:13:15PM +0200, Noel Koethe wrote: > is it correct that apache and postgresql are still waiting for > a DSA fix? > > see: > postgresql #155419 This was fixed a month ago: http://www.debian.org/security/2002/dsa-165 > and #163311 Hmm...I was not aware that the VACUUM bug had security implications. Can you elaborate? > apache #163228 This is a DoS, and is pending. -- - mdz