Alma Linux: CVE-2024-6387: Important: openssh security update (ALSA-2024-4312)

Alma Linux: CVE-2024-6387: Important: openssh security update (ALSA-2024-4312)

Severity

9

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

07/01/2024

Created

07/09/2024

Added

07/09/2024

Modified

01/30/2025

Description

A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.

Solution(s)

• alma-upgrade-openssh
• alma-upgrade-openssh-askpass
• alma-upgrade-openssh-clients
• alma-upgrade-openssh-keycat
• alma-upgrade-openssh-server
• alma-upgrade-pam_ssh_agent_auth

References

• https://attackerkb.com/topics/cve-2024-6387
• CVE - 2024-6387
• https://errata.almalinux.org/9/ALSA-2024-4312.html