Subject: [ubuntu-mx] Vulnerabilidad crítica de SSL en Ubuntu. Regeneren sus llaves.

From: José Luis Chiquete Valdivieso <[email-masked]>
Date: Fri, 16 May 2008 15:39:01 -0500

Me llegó esta alerta de la lista de partners de Ubuntu:

Dear Jose Luis, 

We have issued an Ubuntu Security Notice to inform all of our users that we have identified a serious security issue in Ubuntu / Debian. All users who have generated ssh keys on previous versions of libssl0.9.8 are affected, and we would recommend that you rebuild any ssh keys that you have to be absolutely certain.

The problem can be corrected by upgrading your system to the
following package versions :-

Ubuntu 7.04:   libssl0.9.8       0.9.8c-4ubuntu0.3

Ubuntu 7.10:   libssl0.9.8         0.9.8e-5ubuntu3.2

Ubuntu 8.04 LTS:   libssl0.9.8        0.9.8g-4ubuntu3.1

If you have any questions about how this might affect your own Ubuntu
systems or if you need help with your customers who have support contracts, please contact us at [email-masked]

You can read more about the issue at http://www.ubuntu.com/usn/usn-612-1.

I hope that this does not cause too much inconvenience.

Thanks,

---

From: Leonel Nunez <[email-masked]>
Date: Fri, 16 May 2008 14:52:57 -0600

> I hope that this does not cause too much inconvenience.

Y no solo es regenerar llaves  despues de la actualizacion
 es tambien regenerar los certificados  de ssl para el apache  postfix 
dovecot y demas

LEonel