Bug 222233

Summary:	Ebuild request: ssh-vulnkey or similar
Product:	Gentoo Linux	Reporter:	Natanael Copa <natanael.copa>
Component:	New packages	Assignee:	Gentoo Security <security>
Status:	RESOLVED DUPLICATE
Severity:	enhancement
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description Natanael Copa 2008-05-15 09:07:08 UTC

Would be nice to find out if users have generated their ssh keys on vulnerable debian boxes so those can be deleted ASAP.

I guess gentoo infra should do the same (you cannot guarantee that the ssh keys developers generated are not made on vulnerable debian/ubuntu boxes)

more related info here:
http://metasploit.com/users/hdm/tools/debian-openssl/

Comment 1 Robert Buchholz (RETIRED) gentoo-dev

2008-05-15 21:51:40 UTC


*** This bug has been marked as a duplicate of bug 221759 ***