On Fri, May 16, 2008 at 5:52 AM, Daniel Hokka Zakrisson <email@example.com>
> Guenther Fuchs wrote:
> > Hi there,
> > today various forms of announcements made the vulnerability of debian
> > openssl packages public, messages sounded like this:
> > --- snip ---
> > A severe vulnerability was found in the random number generator (RNG)
> > of the Debian OpenSSL package, starting with version 0.9.8c-1 (and
> > similar packages in derived distributions such as Ubuntu). ...
> > --- snap ---
> > My question to that is: Is it possible, that guests using different
> > distributions (example Fedora or RedHat) on Debian hosts are affected
> > by that?
> As long as you haven't used your guests' DSA keys from the host, you
> should be safe. (From what I understand, anyway. I haven't read any of the
> advisories too carefeully.)
> > I would guess no as there are different libraries used inside, but I'm
> > not too far into that technical things ;-)
Your security is only as good as the weakest link.
-- In the meantime, here is your PSA: "It's so hard to write a graphics driver that open-sourcing it would not help." -- Andrew Fear, Software Product Manager, NVIDIA Corporation http://kerneltrap.org/node/7228Received on Fri May 16 02:56:17 2008