isc.sans.org — Scripts that allow brute forcing of vulnerable keys (any SSH server using public keys that were generated on a Debian machine between September 2006 and 13th of May 2008) are in the wild so regenerate SSH keys ASAP. This affects all Debian-based distros, including Ubuntu.