openssh-8.7p1-38.el9.ML.2
エラータID: AXSA:2024-8500:05
Release date:
Wednesday, July 3, 2024 - 10:54
Subject:
openssh-8.7p1-38.el9.ML.2
Affected Channels:
MIRACLE LINUX 9 for x86_64
Severity:
High
Description:
SSH (Secure SHell) is a program for logging into and executing
commands on a remote machine. SSH is intended to replace rlogin and
rsh, and to provide secure encrypted communications between two
untrusted hosts over an insecure network. X11 connections and
arbitrary TCP/IP ports can also be forwarded over the secure channel.
Security Fix(es):
- Possible remote code execution due to a race condition in signal handling
(CVE-2024-6387, regreSSHion)
CVE(s):
CVE-2024-6387
Solution:
Update packages.
CVEs:
CVE-2024-6387
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead to sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
Additional Info:
N/A
Download:
SRPMS
- openssh-8.7p1-38.el9.ML.2.src.rpm
MD5: 9d82f84351960ba1588b6779780dcf3e
SHA-256: 0832049376fa9831a640c0c59ef1c03f06ade5a9cf97aa2f0fcae5ce95eb185c
Size: 2.30 MB
Asianux Server 9 for x86_64
- openssh-8.7p1-38.el9.ML.2.x86_64.rpm
MD5: 9165bf0bc4b33d47541097ff329e4407
SHA-256: db8b86726e7071d22ab930d02ddfeb0aa6927c98b1bb2a2c6806e1520f15fb4e
Size: 463.78 kB - openssh-askpass-8.7p1-38.el9.ML.2.x86_64.rpm
MD5: b6d4aac2255930f8cbe4cf8dea854355
SHA-256: c290d5c9df8d9df6ae6ddc8c70f575f1773e39fd61d186a318be35002e2de4ea
Size: 20.38 kB - openssh-clients-8.7p1-38.el9.ML.2.x86_64.rpm
MD5: e84be94a21fb02008d7f17e3b5a6d8f4
SHA-256: 57cf6d00d399ca7bebef947132a876e4cf065ca516df83af7767c0590a625e06
Size: 718.37 kB - openssh-keycat-8.7p1-38.el9.ML.2.x86_64.rpm
MD5: 155cb14212b06ad5d6c942b2538c604e
SHA-256: 61e332fb7b662f277ed20d04df6f310aeb5d370d9549b02db0531be0472f978e
Size: 21.86 kB - openssh-server-8.7p1-38.el9.ML.2.x86_64.rpm
MD5: 77a74fbedf59536bf3bb46739be3566d
SHA-256: bbe8f78af267a7b27af9bf1b6e89212917cdfb87c23f27002eb500100b6cb91f
Size: 463.15 kB - pam_ssh_agent_auth-0.10.4-5.38.el9.ML.2.x86_64.rpm
MD5: e0c8ce554a08d8e68afd3d401884e3c0
SHA-256: 155a497dff8abf5bf22e2d5b167e4bef82afe0b6d8fb6879c00570f178b032f5
Size: 68.72 kB