Ubuntu
openssh package

  1. Bug #2070497
  2. Comment #3

Comment 3 for bug 2070497

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package openssh - 1:9.3p1-1ubuntu3.6

---------------
openssh (1:9.3p1-1ubuntu3.6) mantic-security; urgency=medium

  * SECURITY UPDATE: remote code execution via signal handler race
    condition (LP: #2070497)
    - debian/patches/CVE-2024-6387.patch: don't log in sshsigdie() in log.c.
    - CVE-2024-6387

 -- Marc Deslauriers <email address hidden> Wed, 26 Jun 2024 09:11:02 -0400