just a little heads up for those NOT reading the security lists...

[paul cooke]

this was found and patched on Sunday... 

<http://www.ubuntu.com/usn/usn-262-1>

fantastic turnaround... unfortunately it leaves quite a bit of egg on our 
faces and a lot of people are going to wonder if any of their users have 
sneakily peeked and discovered the login account and password for the first 
user created on any Ubuntu Breezy machine...

A little word to the wise, assume the worst and promptly change the password 
of that user account as well as apply the security update for base-config & 
passwd