Changes between Version 1 and Version 2 of openssl_vulnerability_2008-05

Timestamp:

May 14, 2008, 12:21:32 PM (12 years ago)

Author:

Jamie McClelland

Comment:

--

openssl_vulnerability_2008-05

@@ -1 +1 @@
 = OpenSSL Vulnerability Discovered =
 
-A security problem was discovered this week affecting servers running the [http://debian.org Debian GNU operating system]. All of our servers are running Debian GNU/Linux so they are all affected.
+A security problem was discovered this week affecting May First/People Link servers.
 
-The security problem is...
+We are in the process of updating all of servers to ensure that are not vulnerable. As a result of our updates, some users may experience error messages that you did not see before.
 
-Please see the [http://wiki.debian.org/SSLkeys Debian wiki page] for a full explanation.
+== Who is affected? ==
+
+The ''only'' members who will be affected are members that:
+
+ * Use [wiki:sftp Secure FTP] or [wiki:secure_shell secure shell (ssh)] to connect to our servers
+ * Use our offsite backup system
+
+== Secure Shell/Secure FTP users ==
+
+If you use Secure FTP or secure shell, you will get a message indicating that the host key has changed. Please see our [wiki:ssl_host_key_changed host key changed] help file to avoid getting that message in the future.
+
+If you are using our offsite backup system - you will also get the [wiki:ssl_host_key_changed host key changed error] - but it will happen during your automated backup process, causing your automated backup to fail until you follow the directions and import the proper new host key.
+
+== More Information ==
+
+Please see the [http://wiki.debian.org/SSLkeys Debian wiki page] for a full explanation of the security problem.