<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Hi, I'm in the same case. What I have to do in order that my thin clients could connect my server after the upgrade of openssh ? Thanks, Thierry john a écrit : <blockquote cite="mid:2be970b50805141217v174f9588q8c7737010399596a@mail.gmail.com" type="cite"> <pre wrap="">On Tue, May 13, 2008 at 9:12 PM, Richard Doyle <a class="moz-txt-link-rfc2396E" href="mailto:rdoyle@islandnetworks.com"><rdoyle@islandnetworks.com></a> wrote: </pre> <blockquote type="cite"> <pre wrap="">There is a potentially serious vulnerability in OpenSSL which affects Edubuntu and other Debian-based distributions: <a class="moz-txt-link-freetext" href="http://www.ubuntu.com/usn/usn-612-1">http://www.ubuntu.com/usn/usn-612-1</a> Fixes are described in <a class="moz-txt-link-freetext" href="http://wiki.debian.org/SSLkeys">http://wiki.debian.org/SSLkeys</a> . Since SSH is a vital part of Edubuntu, and is affected by the vulnerability, every affected system should be fixed ASAP. As I understand it, the fix for version version 7.04 is to run the following commands: sudo rm /etc/ssh/ssh_host_* sudo dpkg-reconfigure openssh-server sudo ltsp-update-sshkeys </pre> </blockquote> <pre wrap=""> </pre> <pre wrap=""> I ran the ssl upgrade provided via package manager on my dev-box running Hardy and rebooted and found my thin clients locked out. Bummer. Glad I didn't apply this against a production box. Next I ran the commands Richard mentioned, but no joy there either. I can log on to the box via the console but thin clients are locked out. Anyone got a fix? Do I need to chroot to /opt/ltsp/ and rebuild the image?? Can we get an edubuntu specific fix figured out and posted to the wiki asap? John </pre> <blockquote type="cite"> <pre wrap=""> -- edubuntu-users mailing list <a class="moz-txt-link-abbreviated" href="mailto:edubuntu-users@lists.ubuntu.com">edubuntu-users@lists.ubuntu.com</a> Modify settings or unsubscribe at: <a class="moz-txt-link-freetext" href="https://lists.ubuntu.com/mailman/listinfo/edubuntu-users">https://lists.ubuntu.com/mailman/listinfo/edubuntu-users</a> </pre> </blockquote> <pre wrap=""> </pre> </blockquote> </body> </html>