the following reports: http://www.cert.org/incident_notes/IN-2001-12.html http://www.cert.org/advisories/CA-2001-35.html
which apparently refers to ssh1 crc-32 compensation attack detector and some other problems? Judging from the page there openssh is fixed only in version 2.3.0 and later? Or has the one in potato been patched so that none of these vulnerabilities. -walter