I saw this on slashdot and have been busy regenerating all my SSH keys all morning:
http://lists.debian.org/debian-secur.../msg00152.html

I thought my tablet would be effected as well, as the version of OpenSSH shipped is high enough to have been vulnerable, but when I ran its server keys through the ssh-vulnkey tool, they came out as okay. The public keys I replaced as a matter of course.

Is the IT version of OpenSSH not based on debian's?