Release Notes: A root compromise bug was fixed. A va_start/va_end bug that crashed on ia64 was fixed. A strlen() segfault was fixed. A service checking bug that always allows cvs and always denies rdist and rsync was fixed. Other small code clean-up fixes were done. Many documentation updates and improvements were made.
Release Notes: This release fixes a design flaw in rssh_chroot_helper that allowed local users with full shell access to gain root privileges.