Voyage Linuxon
Voyage MPDon
Voyage MuBoxon

You are hereBlogs / punkytse's blog / Debian Security Advisory DSA-1571-1 openssl

Debian Security Advisory DSA-1571-1 openssl


By punkytse - Posted on 18 May 2008

It is discovered that the random number generator in Debian's openssl package is predictable. As a result, cryptographic key material may be guessable.

This vulnerability affects the following Voyage Linux release that were based on Debian Etch:

  • All 0.3 versions
  • All 0.4 versions
  • 0.5.0

You are strongly advised to perform the following procedures to update Voyage of the above affected versions.

1. Edit /etc/apt/sources.list, add the line:

deb http://security.debian.org stable/updates main

2. Run:

# apt-get update; apt-get dist-upgrade

Next, follows the information below to regenerate encryption keys and detect comprised keys on your affected systems.