could whoever's doing web pages for security advisories these days take a look at dsa 257? Mike Stone