I've just upgrade the CVS pserver running on samba.org. If anyone sees any problems please let me know via email. Luckily we are running the anonymous CVS pserver in a chroot jail which is updated via rsync from the actual repository so the effects of anyone exploiting the bug would be minimal. Tim.