[ILUG] serious openssl/openssh hole found

[David Howe]

Ubuntu 7.10 (Gutsy) fix was distributed today via the Update Manager.
Required a system reboot by the way.


On Wed, May 14, 2008 11:22 am, FRLinux wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On Wed, May 14, 2008 at 11:18 AM, Luke Ashe-Browne  wrote:
>> I have an ssl cert on my web server i've been running for over a year
>>  and a half (dapper drake) and this should remain unaffected?
>>  libssl 0.9.8a, I won't have to patch and regenerate?
>
> Yes you're right, again the affected list :
>
> Systems which are running any of the following releases:
>  * Ubuntu 7.04 (Feisty)
>  * Ubuntu 7.10 (Gutsy)
>  * Ubuntu 8.04 LTS (Hardy)
>  * Ubuntu "Intrepid Ibex" (development): libssl <= 0.9.8g-8
>  * Debian 4.0 (etch) (see corresponding Debian security advisory)
>
> Steph
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.7 (GNU/Linux)
> Comment: http://getfiregpg.org
>
> iD8DBQFIKr1oKOTSgrG1k6wRAhrzAKDBndsebNSE9DZo0l1jY64xiaWv9gCgzZP9
> Kb5zyQVyL6PxEgphK+7CZR4=
> =KRU6
> -----END PGP SIGNATURE-----
> --
> Irish Linux Users' Group mailing list
> About this list : http://mail.linux.ie/mailman/listinfo/ilug
> Who we are : http://www.linux.ie/
> Where we are : http://www.linux.ie/map/
>


-- 
David Howe
Managing Director
Howe Systems Limited
Tel: +353 402 93030
Mob: +353 86 173 1754
Registered Address: Rock Big, Arklow, County Wicklow
Place of Registration: Dublin, Ireland.
Company Registration Number:399359