The current woody OpenSSH version is 2.9p2; that means (according to http://www.openssh.org/portable.html ) the 2nd version made by the Portability team of the "normal" (i.e. for OpenBSD) 2.9 version. Of course 2.9 stands for 2.9.0, not 2.9.9, so it is vulnerable to those (not very dangerous, IMHO) attacks. Matteo