g0tmi1k/debian-ssh
View on GitHub ↗ ★ 410 Shell
Debian OpenSSL Predictable PRNG (CVE-2008-0166)
9 mentions on Hacker News by 8 people: 0 stories, 9 comments · first 2017-08-02 · latest 2025-05-14
20082026
-
…missed heartbleed entirely Missed it? Not at all, Debian pioneered that style of bugs years before! https://github.com/g0tmi1k/debian-ssh
comment by rs_rs_rs_rs_rs · 2025-05-14 · in Multiple security issues in GNU Screen -
Ouch, that one's bad: https://github.com/g0tmi1k/debian-ssh#the-bug >These lines were removed because they caused the Valgrind and Purify tools to produce warnings about the use of uninitialized data in any code that was linked to OpenSSL.…
comment by meowface · 2024-07-09 · in CVE-2024-6409: OpenSSH: Possible remote code execution in privsep child -
CVE-2008-0166 It was really bad. https://github.com/g0tmi1k/debian-ssh
comment by fragmede · 2024-03-30 · in Debian on xz-utils: revert to version that does not contain changes by bad actor -
…thinks they can improve the software. That lead to things like removing randomness from SSH keys: https://github.com/g0tmi1k/debian-ssh
comment by alphager · 2023-10-08 · in Why is Debian the way it is? -
…software work better with the Debian way of configuring things; sometimes much more catastrophic: https://github.com/g0tmi1k/debian-ssh
comment by alphager · 2023-08-20 · in Debian is at the heart of the most successful Linux distros -
I would have thought https://github.com/g0tmi1k/debian-ssh would be the most famous issue in many people's memories of poor (read: absent) PRNG use. ;)
comment by rincebrain · 2019-01-16 · in An Almost-Secret Algorithm Researchers Used to Break Thousands of RSA Keys -
…vulnerabilities into software too. The famous Debian SSH key generation issue comes to mind. https://github.com/g0tmi1k/debian-ssh
comment by shittyadmin · 2018-08-20 · in Flatpak 1.0 Released, Ready for Prime Time -
…not heard of this one before. There are real world risks associated with spurious warnings. [1]: https://github.com/g0tmi1k/debian-ssh
comment by ninjin · 2018-04-30 · in Lessons from Building Static Analysis Tools at Google -
Not even the maintainers really understand what they are doing : https://github.com/g0tmi1k/debian-ssh > There was an #ifndef PURIFY there for a reason. It's because the openssl authors knew that line would cause trouble in a memory…
comment by Ltfe · 2017-08-02 · in Btrfs has been deprecated in RHEL