------------------------------------------------------------------------
Pardus Linux Security Advisory 2011-89            security@pardus.org.tr
------------------------------------------------------------------------
      Date: 2011-07-06
      Type: Local
------------------------------------------------------------------------

Summary
======
A vulnerability has been fixed in openssh.


Description
==========
Portable OpenSSH's ssh-keysign utility  may  allow  unauthorised  local
access to host keys on platforms if ssh-rand-helper is used.



Affected packages:

  Pardus 2009:
    openssh, all before 5.6_p1-32-8


Resolution
=========
There are update(s) for openssh. You can update them via Package Manager
or with a single command from console:

    pisi up openssh

References
=========
  * http://bugs.pardus.org.tr/show_bug.cgi?id015
  * http://www.openssh.com/txt/portable-keysign-rand-helper.adv

------------------------------------------------------------------------