Login or Register to Ask a Question and Join Our Community


Security Advisories (RSS)

USN-612-7: OpenSSH update

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-612-7: OpenSSH update
# 1  
Old 05-20-2008
USN-612-7: OpenSSH update
Referenced CVEs:
CVE-2008-0166


Description:
=========================================================== Ubuntu Security Notice USN-612-7 May 20, 2008 openssh update CVE-2008-0166 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu. The problem can be corrected by upgrading your system to the following package versions: Ubuntu 6.06 LTS: openssh-server 1:4.2p1-7ubuntu3.4 In general, a standard system upgrade is sufficient to effect the necessary changes. Details follow: USN-612-2 introduced protections for OpenSSH, related to the OpenSSL vulnerabilities addressed by USN-612-1. This update provides the corresponding updates for OpenSSH in Ubuntu 6.06 LTS. While the OpenSSL in Ubuntu 6.06 is not vulnerable, this update will block weak keys generated on systems that may have been affected themselves. Original advisory details: A weakness has been discovered in the random number generator used by OpenSSL on Debian and Ubuntu systems. As a result of this weakness, certain encryption keys are much more common than they should be, such that an attacker could guess the key through a brute-force attack given minimal knowledge of the system. This particularly affects the use of encryption keys in OpenSSH, OpenVPN and SSL certificates.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question

LEARN ABOUT DEBIAN

update-boinc-applinks

update-boinc-applinks(1)												  update-boinc-applinks(1)

NAME

       update-boinc-applinks - create/remove symbolic links for anonymous BOINC applications

SYNOPSIS

       update-boinc-applinks [options]

DESCRIPTION

       update-boinc-applinks  creates  (or  removes)  symbolic links for anonymous BOINC applications and their associated app_info.xml files in a
       given BOINC data directory.

       Note: update-boinc-applinks is an extension for Debian users and is only available in Debian's boinc-client package.

OPTIONS

       For a full summary of options, run update-boinc-applinks --help.

       -h, --help
	      Show help message and all options.

       --create
	      Create symbolic links and project directories.

       --remove
	      Remove symbolic links and empty project directories.

       --data-dir=DIR
	      Manage symbolic links in the given directory DIR. If this option is not present, DIR defaults to the current working directory.

       --project=PROJECT
	      Manage symbolic links only for the given project PROJECT.  Run update-boinc-applinks --list-projects to get a list of  projects  for
	      which  anonymous applications are available and therefore can be replaced with PROJECT. If this option is not present, update-boinc-
	      applinks will manage symbolic links for all available projects.

       --list-projects
	      Show a list of projects for which anonymous applications are available. Normally those applications are provided by packages  called
	      boinc-app-PROJECT (e.g. boinc-app-seti).

AUTHOR

       Written by Frank S. Thomas.

COPYRIGHT

       Copyright (C) 2006, 2008 Debian BOINC Maintainers.

       This  is  free software; you can redistribute it and/or modify it under the terms of the GNU General Public License, Version 2 or any later
       version published by the Free Software Foundation.

								  13 January 2008					  update-boinc-applinks(1)