Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
Debian

Submission + - Debian bug let hackers guess private SSL/SSH keys (gmane.org) 1

SecurityBob writes: Debian package maintainers tend to very often modify the source code of the package they are maintaining so that it better fits into the distribution itself. However, most of the time, there changes are not sent back to upstream for validation, which might cause some tension between upstream developers and Debian packagers. Today, a critical security advisory has been released : a Debian packager modified the source code of OpenSSL back in 2006 so as to remove the seeding of OpenSSL random number generator, which in turns makes cryptographical key material generated on a Debian system guessable. The solution ? Upgrade OpenSSL and re-generate all your SSH and SSL keys. This problem not only affects Debian, but also all its derivatives, such as Ubuntu.

Slashdot Top Deals

"The voters have spoken, the bastards..." -- unknown

Working...