5 Comments
- Cryoniq, on 05/14/2008, -0/+5Imagine how long it would existed if it wasn't open source etc.. that is even more fishy and scary. :)
- FKnight, on 05/14/2008, -0/+3Imagine how much safer all of those hundreds of thousands of X509 certs created by Debian based CA's would be if you actually couldn't look at the bugged source code and use some math to crack all of those certs. I'm not saying open or closed source is better than the other, but this cuts both ways. Horrible bug either way that will cost some people a lot of money and time.
- defconoi, on 05/14/2008, -1/+4sounds pretty fishy to me that this bug existed for 2 years
- simpleboy, on 05/14/2008, -0/+1Well said!
- oobuntu, on 05/14/2008, -1/+1apt-get upgrade on debian/ubuntu machines should give you a new openssl, ssh and libssl0.9.8
luckily my openvpn server is centos. if this means what i think it does, i hope i wouldn't have to revoke and regenerate all keys again!


What is Digg?
Digg is coming to a city (and computer) near you! Check out all the details on our