Just ran an apt update and upgrade on my Debian 12 server. OpenSSH packages were... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

theandrewbailey on July 1, 2024 | parent | context | favorite | on: RegreSSHion: RCE in OpenSSH's server, on glibc-bas...

Just ran an apt update and upgrade on my Debian 12 server. OpenSSH packages were the only ones upgraded.

hgs3 on July 1, 2024 [–]

Yes, the Debian 12 fix is out. You can verify you're patched by running 'ssh -V' and verifying you see 'deb12u3'. If you see 'deb12u2' then you're vulnerable [1].

[1] https://security-tracker.debian.org/tracker/CVE-2024-6387

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact