Security bugs are reported here via bugzilla

[Ladislav Hagara <ladislav.hagara AT unob.cz>]

OpenSSH 4.2p1 has been released.
Updated in all grimoires.

This release fixes two security problems, namely in dynamic port 
forwarding and in GSSAPI credential delegation. It also includes another 
round of proactive security changes (for signed vs. unsigned integer 
issues), a new compression method that eliminates the risk of 
pre-authentication exploitation of zlib bugs, stronger arcfour ciphers, 
and many improvements to connection sharing.

All openssh users should upgrade to the latest available version:
         # scribe update
         # cast -c openssh


--
Got yourself a ledger.sourcemage.org account?
http://ledger.sourcemage.org/

Ladislav Hagara
Source Mage GNU/Linux Developer
http://www.sourcemage.org/