On Thu, Sep 18, 2003 at 10:58:49PM -0400, Robert Brockway wrote: > Was there any particular reason that this newer fixed version has a > version number the makes it look older than the exploitable version? Simple: it doesn't. The version in stable is 8.12.3-4, and the version on security.debian.org is 8.12.3-6.6. Your package came from someplace else. -- - mdz