Atropos wrote:
After identifying an insecurity in OpenSSH, a new version with a workaround is available (a complete fix will be forthcoming soon). We’ve written an article that shows you how to upgrade your OpenSSH implementation to this new workaround version.
We’ve updated the article to reflect the release of OpenSSH 3.4p1, which fixes the security hole. If you haven’t already done so, upgrade today!
In other news, Apple released “Repair Privileges Utility 1.0”, which allows Mac OS X 10.1.5 users to reset important system permissions to their defaults.