[CentOS] Openssh and CentOS

> I would like to know why the version of openssh used in Centos4.4
> is based on version 3.9p1 but not on a more recent version of openssh?
>
> The vulnerabilities found and corrected in the last version of openssh
> are also corrected in version 3.9?

The url below has the answers you seek.
http://www.redhat.com/advice/speaks_backport.html

-- 
During times of universal deceit, telling the truth becomes a revolutionary act.
George Orwell