Hi Connie & Troy,

RHSA-2008-0855 scares me.

There's not much information in that advisory, but it sounds like someone 
signed trojaned ssh packages with TUV's key.

Could you please verify that the SRPMS you built from had not been 
tampered with, and let us know?

Thanks,
 	Stephan

-- 
Stephan Wiesand
   DESY - DV -
   Platanenallee 6
   15738 Zeuthen, Germany