Head over to OpenSSH.com They have just released version 3.4, which should fix some overflow problems and adds lot's of new checks against dubious input. Advisories and updates on the various pages there. Mark Janssen Syconos IT Consultancy -- To UNSUBSCRIBE, email to debian-isp-request@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org