[Bug 4266] New: openssh vulnerability

[bugzilla-daemon at amethyst.openembedded.net]

http://bugs.openembedded.net/show_bug.cgi?id=4266

           Summary: openssh vulnerability
    Classification: Unclassified
           Product: Openembedded
           Version: unspecified
          Platform: Other
        OS/Version: other
            Status: UNCONFIRMED
          Severity: blocker
          Priority: P1
         Component: org.openembedded.dev
        AssignedTo: openembedded-issues at lists.openembedded.org
        ReportedBy: bugs.openembedded.org at rolf.leggewie.biz


OE derived packages are probably vulnerable to the recently discovered
openssl/openssh vulnerabilities.  I don't understand enough of this to have a
good overview.  XorA mentioned in IRC that 0.9.7m and 0.9.8g of our openssl
packages are vulnerable.  We have applied the debian patches that opened this
hole.

I'd help with fixing this security issue.  Maybe we should collect a list of
what is vulnerable and assemble a todo list first.

-- 
Configure bugmail: http://bugs.openembedded.net/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.