A severe vulnerability in OpenSSH, dubbed "regreSSHion" (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing

cross-posted from: https://lemmy.pt/post/5733711

A severe vulnerability in OpenSSH, dubbed “regreSSHion” (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing

  • dino@discuss.tchncs.deEnglish
    2·
    6 months ago

    My server tells me a restart would be required because of:

    linux-base linux-image-6.1.0-22-amd64

    Does that have anything to do with the SSH package?

    • Kusimulkku@lemm.ee
      2·
      6 months ago

      It sounds like it’s the kernel but whether it has anything to do with ssh, I really don’t know. Sometimes parts work together in surprising ways, as I learned with the recent sshd/systemd/xz exploit.

      You might be fine and this was the most alarming exploit since it’s very inconvenient, but personally I’d restart just to be sure.