Hi, http://security-tracker.debian.net/tracker/CVE-2007-0911 says: lenny 5.2.0-10 vulnerable sid 5.2.0-11 vulnerable However, its bug 410561 and 410995 was done in 5.2.0-9. So it should be closed. -- Regards, Hideki Yamane