Re: [vserver] OpenSSL: various distributions on debian hosts affected or not?

Guenther Fuchs wrote:
> Hi there,
>
> today various forms of announcements made the vulnerability of debian
> openssl packages public, messages sounded like this:
>
> --- snip ---
> A severe vulnerability was found in the random number generator (RNG)
> of the Debian OpenSSL package, starting with version 0.9.8c-1 (and
> similar packages in derived distributions such as Ubuntu). ...
> --- snap ---
>
> My question to that is: Is it possible, that guests using different
> distributions (example Fedora or RedHat) on Debian hosts are affected
> by that?

As long as you haven't used your guests' DSA keys from the host, you
should be safe. (From what I understand, anyway. I haven't read any of the
advisories too carefeully.)

> I would guess no as there are different libraries used inside, but I'm
> not too far into that technical things ;-)
>
> --
> regards 'n greez,
>
> Guenther Fuchs
> (aka "muh" and "powerfox")

-- 
Daniel Hokka Zakrisson