Hi, I am going to raise the severity of this bug because version 1.4.9 is out with a fix for CVE-2008-1530:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1530 -- Laurent Bonnaud. http://www.lis.inpg.fr/pages_perso/bonnaud/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]