newsNews: SSH keys weakness

Latest News
Savannah IPv4 address has changed posted by rwp, Sun 09 Aug 2015 08:07:57 PM UTC - 0 replies
IPv4 address change for Savannah posted by rwp, Sat 08 Aug 2015 05:14:00 AM UTC - 0 replies
Savannah https SSL certificates updated posted by rwp, Mon 02 Mar 2015 10:15:31 PM UTC - 0 replies
Savannah VCS Storage Maintenance Completed posted by rwp, Wed 14 May 2014 10:19:51 PM UTC - 0 replies
Savannah VCS Maintenance posted by rwp, Sun 11 May 2014 08:05:38 PM UTC - 0 replies
[176 news in archive]

SSH keys weakness

Item posted by Sylvain Beucler <Beuc> on Tue 13 May 2008 11:00:43 PM UTC.

A vulnerability was discovered in Debian Etch's OpenSSL package:

This means that keys generated under this platform version are weak, and easily crackable.

Consequently we've run the tool and disabled keys considered weak. They are marked as '# WEAK KEY' in the Savannah interface. Please remove or regenerate these keys (after upgrading your openssl package); we also suggest you look for other places where these keys were used, and replace them there too.

The Savannah SSH host keys (cvs/git/arch/ predate Etch and are not impacted.

The and https keys were generated through GnuTLS and are not impacted.


No messages in SSH keys weakness


Back to the top

Powered by Savane 3.1-cleanup