Puppet automatic upgrade for openssl and reset openssh server key on Debian due to CVE-2014-0160

debian-reset-ssh-keys.pp

    # https://security-tracker.debian.org/tracker/CVE-2014-0160
    file { '/etc/cron.d/reset-sshkeys-cron':
        ensure  => 'present',
        content => "PATH=/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin\n0 * * * * root [ ! -e /reset-ssh-key1 ] && touch /reset-ssh-key1 && apt-get update && apt-get install -y openssh-client openssh-server openssl libssl-dev libssl1.0.0 && /bin/rm /etc/ssh/ssh_host_* && /usr/sbin/dpkg-reconfigure openssh-server\n",
        mode    => '0644',
        owner   => 'root',
        group   => 'root',
    }