USN-612-11: openssl-blacklist update

USN-612-3 addressed a weakness in OpenSSL certificate and key generation and introduced openssl-blacklist to aid in detecting vulnerable certificates and keys. This update adds RSA-4096 blocklists to the openssl-blacklist-extra package and adjusts openssl-vulnkey to properly handle RSA-4096 and...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-9)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by introducing openssl-blacklist to aid in detecting vulnerable private keys. This update enhances the openssl-vulnkey tool to check Certificate Signing Requests, accept input from STDIN, and check moduli without ...

USN-612-10: OpenVPN regression

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by adding checks for vulnerable certificates and keys to OpenVPN. A regression was introduced in OpenVPN when using TLS with password protected certificates which caused OpenVPN to not start when used with...

Debian Security Advisory DSA 1576-1 (openssh)

The remote host is missing an update to openssh announced via advisory DSA 1576-1. OpenVAS Vulnerability Test $Id: deb15761.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1576-1 openssh Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Debian: Security Advisory (DSA-1576-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1576-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1576-2 (openssh)

The remote host is missing an update to openssh announced via advisory DSA 1576-2. OpenVAS Vulnerability Test $Id: deb15762.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1576-2 openssh Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

Ubuntu 6.06 LTS / 7.04 / 7.10 / 8.04 LTS : openssl-blacklist update (USN-612-8)

USN-612-3 addressed a weakness in OpenSSL certificate and key generation in OpenVPN by introducing openssl-blacklist to aid in detecting vulnerable private keys. This update enhances the openssl-vulnkey tool to check X.509 certificates as well, and provides the corresponding update for Ubuntu 6.0...

Ubuntu 6.06 LTS : openssh update (USN-612-7)

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

USN-612-7: OpenSSH update

USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems tha...

Debian DSA-1576-1 : openssh - predictable random number generator

The recently announced vulnerability in Debian's openssl package DSA-1571-1, CVE-2008-0166 indirectly affects OpenSSH. As a result, all user and host keys generated using broken versions of the openssl package must be considered untrustworthy, even after the openssl update has been applied. 1...

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

------------------------------------------------------------------------ Debian Security Advisory DSA-1576-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 16, 2008 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1576-2] New openssh packages fix predictable randomness

------------------------------------------------------------------------ Debian Security Advisory DSA-1576-2 [email protected] http://www.debian.org/security/ Noah Meyerhans May 16, 2008 http://www.debian.org/security/faq -...

Ubuntu 7.04 / 7.10 / 8.04 LTS : ssl-cert vulnerability (USN-612-4)

USN-612-1 fixed vulnerabilities in openssl. This update provides the corresponding updates for ssl-cert -- potentially compromised snake-oil SSL certificates will be regenerated. A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a resul...

Ubuntu 7.04 / 7.10 / 8.04 LTS : openssh update (USN-612-5)

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as 'no-port-forwarding' or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

Weak Debian OpenSSH Keys in ~/.ssh/authorized_keys

The remote host has one or more /.ssh/authorizedkeys files containing weak SSH public keys generated on a Debian or Ubuntu system. The problem is due to a Debian packager removing nearly all sources of entropy in the remote version of OpenSSL. This problem does not only affect Debian since any us...

Linux distributives OpenSSH / OpenSSL weak random generator

Weak random generation in Debian-based distributives Debian, Ubuntu...

USN-612-5: OpenSSH update

Matt Zimmerman discovered that entries in /.ssh/authorizedkeys with options such as "no-port-forwarding" or forced commands were ignored by the new ssh-vulnkey tool introduced in OpenSSH see USN-612-2. This could cause some compromised keys not to be listed in ssh-vulnkey's output. This update al...

[SECURITY] [DSA 1576-1] New openssh packages fix predictable randomness

------------------------------------------------------------------------ Debian Security Advisory DSA-1576-1 [email protected] http://www.debian.org/security/ Florian Weimer May 14, 2008 http://www.debian.org/security/faq -...

[USN-612-2] OpenSSH vulnerability

=========================================================== Ubuntu Security Notice USN-612-2 May 13, 2008 openssh vulnerability CVE-2008-0166, http://www.ubuntu.com/usn/usn-612-1 =========================================================== A weakness has been discovered in the random number...