[Bug 509990] Review Request: CVE-2008-0166_fingerprints - Fingerprints of the keys affected by CVE-2008-0166

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=509990





--- Comment #6 from Tomas Hoger <thoger at redhat.com>  2009-07-07 10:33:47 EDT ---
(In reply to comment #5)
> > I had no specific suggestion in mind, Debian/Ubuntu named their packages as
> > open(ssh|ssl|vpn)-blacklist.  
> Debian users knows the problem, redhats, may not. I preffer have the matter of
> weakness mentioned in the name.  

I do see some of the files seem to come from Debian openssh-blacklist packages
(have identical creation dates).  Why not getting remaining key sizes included
in openssh-blacklist upstream tarball and name Fedora package after it?

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.