Hi! It seems that DSA 1026-1 fixed this issue for sarge (with sash version 3.7-5sarge1), hence I think that this bug should be closed now.
References: [DSA 1026-1] http://lists.debian.org/debian-security-announce/debian-security-announce-2006/msg00109.html -- :-( This Universe is buggy! Where's the Creator's BTS? ;-) ...................................................................... Francesco Poli GnuPG Key ID = DD6DFCF4 Key fingerprint = C979 F34B 27CE 5CD8 DC12 31B5 78F4 279B DD6D FCF4
pgp5omIPevjAi.pgp
Description: PGP signature