Ubuntu
openssl package

CVE-2008-0166: predictable random number generator

Bug #229951 reported by Colin Leroy-Mira
264
Affects Status Importance Assigned to Milestone
openssl (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

See http://lists.debian.org/debian-security-announce/2008/msg00152.html.

From what I've found out, keys generated with the openssl package in Edgy, Feisty, Gutsy and Hardy are impacted by that problem. Keys generated with Dapper's openssl are OK.

CVE References

Revision history for this message
Kees Cook (kees) wrote :

Fixes are being published currently.

Changed in openssl:
status: New → Fix Committed
Revision history for this message
Colin Leroy-Mira (colin-colino) wrote :

Thanks!

Revision history for this message
Kees Cook (kees) wrote :

http://www.ubuntu.com/usn/usn-612-1

Changed in openssl:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public Security information  
Everyone can see this security related information.

Duplicates of this bug

Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.