So, you're running a production or even testing VoIP environment on Debian or Ubuntu? Forget VoIP for the moment, if you have ANY outward facing Debian or Ubuntu systems out there, then you may potentially have a large problem on your hands. It's time to regenerate ALL of your certificates and keys - ASAP!

If you're using key-based SSH authentication, a new exploit could potentially brute force your server and cause a major problem. Even more, all cryptographic material residing on these servers may also be easily compromised as well.

For more information, please follow this link to the SANS Internet Storm Center: http://isc.sans.org/