Debian/Ubuntu Users need to regen SSH keys

[donb01]

Just an FYI to any of you who are running Debian/Ubuntu and have SSH keys that were generated between Sept of 2006 and Monday - there was a bug that allows your encryption keys to be broken very easily. You have to regen your certificates as well after you regen the keys. Be sure you are patched and then regen everything.

For more information see the Internet Storm Center warning here:

http://isc.sans.org/

 

[danomac]

Someone else also pointed out (in another forum I frequent) that even if you have Debian/Ubuntu clients on a non-Debian/Ubuntu server you should regenerate your keys on the server.