RHSA-2024:4457: Moderate: openssh security update
Published Jul 10, 2024
·Updated
Moderate: openssh security update
Other sources
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.Security Fix(es): openssh: Possible remote code execution due to a race condition in signal handling affecting Red Hat Enterprise Linux 9 (CVE-2024-6409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
61 affected componentsFixes available
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems
Red Hat Red Hat Enterprise Linux for Power, little endian
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux for ARM 64
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
redhat/openssh<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debugsource<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-sk-dummy-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debugsource<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-sk-dummy-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-askpass-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-clients-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-debugsource<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-keycat-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-server-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh-sk-dummy-debuginfo<8.7p1-38.el9_4.4
8.7p1-38.el9_4.4
redhat/openssh<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-askpass<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-askpass-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-clients<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-clients-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-debugsource<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-keycat<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-keycat-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-server<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-server-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
redhat/openssh-sk-dummy-debuginfo<8.7p1-38.el9_4.4.aa
8.7p1-38.el9_4.4.aa
Remediation
Event History
Jul 10, 2024
Advisory Published
via Red Hat·01:14 PM
May 23, 2026
Advisory Published
via Red Hat·12:58 AM
Data Sourced
via Red Hat·12:58 AM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2024:4457?
The severity of RHSA-2024:4457 is classified as moderate.
2
How do I fix RHSA-2024:4457?
To fix RHSA-2024:4457, update the affected packages to version 8.7p1-38.el9_4.4.
3
Which systems are affected by RHSA-2024:4457?
RHSA-2024:4457 affects various versions of Red Hat Enterprise Linux including for IBM z Systems, x86_64, and Power architectures.
4
Is there a known exploit for RHSA-2024:4457?
As of now, there are no publicly known exploits specifically associated with RHSA-2024:4457.
5
What components are vulnerable in RHSA-2024:4457?
The vulnerable components identified in RHSA-2024:4457 include the OpenSSH client and server.