In message <3F6769CF.5D63F370@greendragon.com>, William Allen Simpson writes:
>[Seen on NANOG]
>
>Just in case no one has seen this:
>
>http://slashdot.org/articles/03/09/16/1327248.shtml?tid=126&tid=172
>
>So, I checked http://openssh.org/, and sure enough there was already a 
>new version.  So far, so good.
>
>I've been experimenting with debian lately, and saw from the /. 
>comments that they were ready to go (a mere 2 hours from release):
>  apt-get update
>  apt-get upgrade
>
>Wow, that was easy!  I was impressed!
>

Yup.  The fix is in the 1.6.1 and -current trees now.  I hope we get an 
advisory out very soon.


>How is the moving everything to packages for easy updates project 
>coming along here?

Good question.


		--Steve Bellovin, http://www.research.att.com/~smb