openssh 3.1 & www.openbsd.org

[Alex de Joode <usura@zedz.net>]

1) why didn't the anouncement of OpenSSH 3.1 contain at least
   an advisory to upgrade as there was a hole in the previous
   versions. people reading the anouncement would not think
   "hey I *need* to upgrade".

2) given the openssh hole, it might be needed to change the
   OpenBSD website:

   "Four days without a remote hole in the default install!"

   or do the OpenBSD developers deem the hole not remote enough ?

-- 
Exit! Stage Left!