FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Ubuntu > Ubuntu User

 
 
LinkBack Thread Tools
 
Old 05-13-2008, 03:11 PM
"Sandy Harris"
 
Default Fairly serious Debian security bug

Does this affect Ubuntu? Is it fixed?
http://lists.debian.org/debian-security-announce/2008/msg00152.html

From that bulletin:

It is strongly recommended that all cryptographic key material
which has been generated by OpenSSL versions starting with
0.9.8c-1 on Debian systems is recreated from scratch.

Furthermore, all DSA keys ever used on affected Debian systems
for signing or authentication purposes should be considered
compromised; ....

The first vulnerable version, 0.9.8c-1, was uploaded to the
unstable distribution on 2006-09-17, and has since propagated
to the testing and current stable (etch) distributions. ...

Which, if any, Ubuntu versions are affected?

Affected keys include SSH keys, OpenVPN keys, DNSSEC
keys, and key material for use in X.509 certificates and
session keys used in SSL/TLS connections. Keys generated
with GnuPG or GNUTLS are not affected, though.

This looks serious. What is the recovery procedure to ensure
any compromised keys are cleaned up?

--
Sandy Harris,
Nanjing, China

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 
Old 05-13-2008, 03:20 PM
"Alexandre Franke"
 
Default Fairly serious Debian security bug

On Tue, May 13, 2008 at 5:11 PM, Sandy Harris <sandyinchina@gmail.com> wrote:
> Does this affect Ubuntu? Is it fixed?

Seems like your able to read debian-security list, so you should be
able to read ubuntu-security list as well.

http://www.ubuntu.com/usn/usn-612-1

--
Alexandre Franke

--
ubuntu-users mailing list
ubuntu-users@lists.ubuntu.com
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
 

Thread Tools




All times are GMT. The time now is 06:36 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org