I've posted a copy of the message I sent to Theo on February 3 at <http://www.cs.hmc.edu/~pmiller/openssh-report>. The instruction of where to submit a report was found at <http://www.openbsd.org/security.html> which may not have been the fastest means of contact, in retrospect, but should have evoked a much quicker response than it did. Given that, I would be inclined to ask if there was a problem in that message's delivery, if someone with the means to check feels like doing so.
Phil -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]