Over the past couple of weeks there has been concern at where I work (at NOAA) about system intrusions exploiting some flaws in openssh. I have verified that Redhat released a patch to cure the problem. It is openssh-3.1p1-6. In addition, openssh-3.4 is also available in rpm form. I don't know about Debian or Slackware packages that will fix this problem. I do believe however that there is a tool under Debian that can convert rpm to dpkg. Jim Wantz WB0TFK