[Technik] [SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

[Noèl Köthe]

Am Freitag, den 16.05.2008, 18:14 +0200 schrieb Noah Meyerhans:

> Debian Security Advisory DSA-1576-2                  security at debian.org
> http://www.debian.org/security/                           Noah Meyerhans
> May 16, 2008                          http://www.debian.org/security/faq
> 
> Package        : openssh
> Vulnerability  : predictable random number generator
> Problem type   : remote
> Debian-specific: yes
> CVE Id(s)      : CVE-2008-0166

openssh auf allen Rechnern aktualisiert.

> For the stable distribution (etch), this problem has been fixed in version
> 1:4.3p2-9etch2

changelog:
openssh (1:4.3p2-9etch2) stable-security; urgency=low

  * Add a FILES section to ssh-vulnkey(1) (thanks, Hugh Daniel).
  * ssh-vulnkey handles options in authorized_keys (LP: #230029), and treats
    # as introducing a comment even if it is preceded by whitespace.

 -- Colin Watson <cjwatson at debian.org>  Wed, 14 May 2008 12:35:05 +0100

-- 
Noèl Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /archiv/technik/attachments/20080519/03e042f5/attachment.pgp