I've just updated the version of OpenSSH to 3.7p1-1.OpenSSH.org now lists 3.7.1p1 as the version to go with to fix this vuln. Haven't looked what last-minute changes were made that made 3.7.1 come out about 12 hours after 3.7 - must've been urgent.
Shawn
-- Unsubscribe info: http://cygwin.com/ml/#unsubscribe-simple Problem reports: http://cygwin.com/problems.html Documentation: http://cygwin.com/docs.html FAQ: http://cygwin.com/faq/