openssh-blacklist is broken and doesn't do anything useful at all

Kurt Seifried kurt at seifried.org
Thu Aug 30 06:14:42 UTC 2012


https://bugzilla.redhat.com/show_bug.cgi?id=852964

Description of problem:

openssh-blacklist is the "Downloader of the openssh keys affected by
CVE-2008-0166" (the Debian OpenSSL key generation issue). It no longer
works as the site it tries to download from is

The url in rpm -qpi:

http://www.benhur.prf.cuni.cz/medved-7/wydobitki/?path=openssh-blacklist

is server not found.

The server URL listed for the actual download:

http://jfch2222.fedorapeople.org/openssh-blacklist/

is 403 forbidden.

This program no longer works at all, it should probably be removed from
Fedora.

-- 
Kurt Seifried
kurt at seifried.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/devel/attachments/20120830/0cdb878c/attachment-0001.html>


More information about the devel mailing list