Just got this from Joey at Debian. There's a CVE typo in DSA 949 (crawl); the correct number is CVE-2006-0045. The original number was for Albatross. - Steve