Hi Troy, On Fri, 22 Aug 2008, Troy Dawson wrote: [...] > As an extra precaution, I have just gone through our openssh source and done > comparison's of each file with both older, newest, and the openssh src.rpm > that was in question. And everything is ok. > There was no difference in any files except the spec files. > The spec files were only changed in known, consistant ways. > The newer src.rpm's had more patches, for bug and security fixes. All of > these patches were documented on RedHat's site, and in the changelogs. > > I am very confident in saying that our version of openssh was NOT > compromised. Huge thanks for performing this check, and for doing it so quickly. I'm glad I was just paranoid. Cheers, Stephan -- Stephan Wiesand DESY - DV - Platanenallee 6 15738 Zeuthen, Germany