I vaguely remember posting once or twice before about a vendor posting a timeline, but it's stull so rare that I remain surprised! http://www.samba.org/samba/security/CVE-2007-4138.html - Steve