Fedora related: http://www.redhat.com/archives/fedora-announce-list/2008-August/msg00012.html Red Hat related: http://rhn.redhat.com/errata/RHSA-2008-0855.html http://www.redhat.com/security/data/openssh-blacklist.html Don't know if/how this will effect CentOS - I'll have to keep my eye on their releases as well.