This bug really should have critical or release-critical as severity level. It almost caused an production box with debian sarge to break. (/var filesystem full) I verified this bug on stable and sid. As this is an DOS attack. Regards, Daniel van Eeden