Oh, and elm apparently has a buffer overflow in Message-ID header handling too. See http://www.linuxsecurity.com/advisories/redhat_advisory-1497.html --Brett