Hi, I might be wrong in jumping in making an assumption yet when I clicked the location mentioned in the message with the subject [suse-security] Lion worm with SuSEfirewall blocked? I out of curiosity cliked the link to the suse update site mentioned where I have been informed regarding teh apache update with security fix note. 1) Has there been a security announcement for that which I accidently did not noticed. If there was none the package is dated 21 st March meaning a week over so there is something missing. Or alternativle apache 1.3.17 is not vulnarable. 2) patches directory does not have anything regarding apache so if you do an update with YOU you will not get it. I though YOU was for security fixes Sorry if there had been an announcement an I have missed it -- Togan Muftuoglu