Conversation

Notices

1. Embed this notice
   Peter Krefting (nafmo@social.vivaldi.net)'s status on Tuesday, 09-Jul-2024 23:10:31 JST Peter Krefting

   in reply to

   • Sven Geggus

   @giggls According to the linked email, it is caused by a Fedora/Red Hat-specific patch, which apparently is not included in Debian.

   "Specifically, openssh-7.6p1-audit.patch found in Red Hat's package of
   OpenSSH adds code to cleanup_exit() that exposes the issue. Relevantly,
   this patch is found in RHEL 9 (and its rebuild/downstream
   distributions), where the package is based on OpenSSH 8.7p1."

   • Embed this notice
     Sven Geggus (giggls@karlsruhe-social.de)'s status on Tuesday, 09-Jul-2024 23:10:33 JST Sven Geggus

     Do I understand this correctly that CVE-2024-6409 is irrelevant for #Debian stable based machines? https://security-tracker.debian.org/tracker/CVE-2024-6409