Is there a security ssh issue in ubuntu?

Bug #397474 reported by Daniel Stone

This bug report was converted into a question: question #76509: Is there a security ssh issue in ubuntu?.

8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openssh (Ubuntu)
Invalid
Undecided
Unassigned

Bug Description

We have limited information about this exploit and the extent of it, but as far as we know, it affects only Linux boxes running OpenSSH compiled against OpenSSL, with the exception of OpenSSL version 1.0.x beta.

Is this resolved in any patches?

tags: added: 0day
security vulnerability: no → yes
Revision history for this message
Chris Coulson (chrisccoulson) wrote :

Thank you for taking the time to report this issue and helping to make Ubuntu better. Examining the information you have given us, this does not appear to be a bug report so we are closing it and converting it to a question in the support tracker. We appreciate the difficulties you are facing, but it would make more sense to raise problems you are having in the support tracker at https://answers.launchpad.net/ubuntu if you are uncertain if they are bugs. For help on reporting bugs, see https://help.ubuntu.com/community/ReportingBugs#When%20not%20to%20file%20a%20bug.

security vulnerability: yes → no
tags: removed: 0day
Changed in openssh (Ubuntu):
status: New → Invalid
Revision history for this message
Colin Watson (cjwatson) wrote : Re: [Bug 397474] [NEW] Is there a security ssh issue in ubuntu?

To my knowledge we don't know anything much about the alleged problem
other than rumours, so it's impossible to say as yet whether it's
resolved. We'll respond quickly to any actual information.

Revision history for this message
Colin Watson (cjwatson) wrote :

Oh, you may find this thread useful:

  http://lists.mindrot.org/pipermail/openssh-unix-dev/2009-July/027726.html

Short version: neither Red Hat's security team nor the OpenSSH
developers are aware of anything concrete as yet, and neither is in
possession of any non-public information on the subject.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Related questions

Remote bug watches

Bug watches keep track of this bug in other bug trackers.