[ubuntu-studio-devel] Important: Ubuntu/Debian Security Hole

Set Hallstrom set at ubuntustudio.org
Wed Aug 31 06:11:12 UTC 2016


On 2016-08-30 22:31, Yoshi wrote:
>  security hole in the
> "Ubuntu/Debian update mechanism" involving authentication and
> signatures

Got to be reffering to this:
https://www.schneier.com/blog/archives/2016/08/powerful_bit-fl.html

"breaking OpenSSH public-key authentication, and forging GPG signatures
from trusted keys"

Sounds like hard times for security experts and the web of trust. :(

-- 
Set Hallstrom aka sakrecoer

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-studio-devel/attachments/20160831/3cc7e610/attachment.pgp>


More information about the ubuntu-studio-devel mailing list