I published that on our advisories page already, several months back. We're not going to update ldaptive in a patch without a good reason, and a DOS is not a good reason. -- Scott