ISS advisory is out, and openssh 3.4 (both portable tar.gz and non-portable) is out. don't ask me why it was released early. http://bvlive01.iss.net/issEn/delivery/xforce/alertdetail.jsp?oid=20584 3.4 is imported to netbsd-current. pullup request will be sent for 1.6 (and 1.5) shortly. itojun