It has turned out that the emergency fix release ssh-1.2.12a contained an even more severe security problem (allowing a local user to gain root access). I have thus removed it, and its use is not recommended. 24.1.1995 Tatu Ylonen