[BlueOnyx:12259] Re: SSH 0-day vulnerability

Michael Stauber mstauber at blueonyx.it
Tue Feb 19 20:28:40 -05 2013


Hi Dan,

> It seems there is a major 0-day vulnerability doing the rounds and a lot 
> of data is showing SSH as the attack vector, even though the exact 
> vulnerability hasn’t been fully discovered yet or patched.
>
> https://bugzilla.redhat.com/show_bug.cgi?id=911937

Yeah, this is pretty bad. Mad props to the Google guys who found the
source of the vulnerability.

Now the question is when we will see updated Kernels for CentOS5
(32-bit), CentOS6 (32/64-bit), SL6 (32/64-bit) and OpenVZ.

-- 
With best regards

Michael Stauber



More information about the Blueonyx mailing list