Hi Connie & Troy,
RHSA-2008-0855 scares me.
There's not much information in that advisory, but it sounds like someone
signed trojaned ssh packages with TUV's key.
Could you please verify that the SRPMS you built from had not been
tampered with, and let us know?
Thanks,
Stephan
--
Stephan Wiesand
DESY - DV -
Platanenallee 6
15738 Zeuthen, Germany