Hello, I see by the commit logs that the so-called PAWS vulnerability was fixed in -current on April 10. Could you, please, say when a patch will be released? Given the hole's low threat-level, this is not a pressing matter; so if the plan is to wait until the possible tcpdump and gzip issues are investigated and fixed (if necessary) so that a "3 for the price of 1" patch-set is released, that would be reasonable. Thanks, stheg Discover Yahoo! Stay in touch with email, IM, photo sharing and more. Check it out! http://discover.yahoo.com/stayintouch.html