There is a vulnerability to Apache / Apache-SSL. .27 version is out. Deb packages seem lagging in testing. Report is dated the 10th, so 1.3.27 deb might be in deb in a day or so praps.. http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2002-0839 Garry