[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#481860: openssh-server upgrade didn't remove all compromised keys from /etc/ssh



On Mon, May 19, 2008 at 04:28:46AM +0200, Vincent Lefevre wrote:
> When I upgraded openssh-server, ssh_host_dsa_key has been replaced
> because it was compromised, but not ssh_host_rsa_key, but this one
> was compromised too!

What does 'grep -i hostkey /etc/ssh/sshd_config' say?

-- 
Colin Watson                                       [cjwatson@debian.org]



Reply to: