Bug#536182: rumours of openssh attack, upgrade sid?

["Thijs Kinkhorst" <thijs@debian.org>]

Hi,

You may have heard of the rumours that there's a new OpenSSH exploit but
it's unclear what this exploit actually is or whether it even exists:
http://isc.sans.org/diary.html?storyid=6742

However, one consistent claim is that the "current version" of OpenSSH
isn't affected. It would make sense to me to get at least unstable/sid
updated with the most recent upstream version, as it wouldn't hurt. Do you
as openssh maintainers think you can do this in the short term? This is at
least some potentially mitigating action we can already take.


cheers,
Thijs