cross-posted from: https://lemmy.pt/post/5733711
A severe vulnerability in OpenSSH, dubbed "regreSSHion" (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing
cross-posted from: https://lemmy.pt/post/5733711
A severe vulnerability in OpenSSH, dubbed "regreSSHion" (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing
The packages in most distros will also restart the server for you. Any existing SSH sessions will technically be running in vulnerable versions, but if I'm understanding the vulnerability correctly this isn't a problem, as they won't be trying to authenticate a user.
If you want to be sure, you can manually restart the ssh server yourself. On most distros
sudo systemctl restart sshdshould do it.