http://lists.debian.org/debian-security/2009/08/msg00061.html