CentOS - Jan 2016 - OpenSSH security flaw

Hello all,

Does anybody know if this one has been patched?

http://thehackernews.com/2016/01/openssh-vulnerability-cryptokeys.html

Thanks.

Boris.

yes, it is already patched: https://lwn.net/Alerts/672044/

affects only c7..

--
Eero



2016-01-16 20:29 GMT+02:00 Boris Epstein <borepstein at gmail.com>:
> Hello all,
>
> Does anybody know if this one has been patched?
>
> http://thehackernews.com/2016/01/openssh-vulnerability-cryptokeys.html
>
> Thanks.
>
> Boris.
> _______________________________________________
> CentOS mailing list
> CentOS at centos.org
> https://lists.centos.org/mailman/listinfo/centos
>

On 1/16/2016 10:29 AM, Boris Epstein wrote:
> Does anybody know if this one has been patched?
>
> http://thehackernews.com/2016/01/openssh-vulnerability-cryptokeys.html
from your article,
> The latest builds of FreeBSD and OpenBSD  have also been patched, as have
Debian, Ubuntu, and RedHat Enterprise
Linux (RHEL).

and, email to the CentOS-announce list yesterday... (digested at 4am PST 
to this list)
> CentOS Errata and Security Advisory 2016:0043
> Moderate Upstream details at : 
> https://rhn.redhat.com/errata/RHSA-2016-0043.html 


-- 
john r pierce, recycling bits in santa cruz