RHSA-2024:4716: Moderate: openssh security update
Published Jul 23, 2024
·Updated
Moderate: openssh security update
Other sources
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.Security Fix(es): openssh: Possible remote code execution due to a race condition in signal handling affecting Red Hat Enterprise Linux 9 (CVE-2024-6409) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
— Red Hat
Affected Software
57 affected componentsFixes available
redhat/openssh<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debugsource<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-sk-dummy-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debugsource<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-sk-dummy-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-askpass-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-clients-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-debugsource<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-keycat-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-server-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh-sk-dummy-debuginfo<8.7p1-30.el9_2.7
8.7p1-30.el9_2.7
redhat/openssh<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-askpass<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-askpass-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-clients<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-clients-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-debugsource<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-keycat<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-keycat-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-server<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-server-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
redhat/openssh-sk-dummy-debuginfo<8.7p1-30.el9_2.7.aa
8.7p1-30.el9_2.7.aa
Red Hat Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Red Hat Enterprise Linux for x86_64 - Extended Update Support
Red Hat Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for ARM 64 - 4 years of updates
Red Hat Red Hat Enterprise Linux Server - AUS
Red Hat Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions
Red Hat Red Hat Enterprise Linux Server for IBM z Systems - 4 years of updates
Red Hat Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Remediation
Event History
Jul 23, 2024
Advisory Published
via Red Hat·12:00 AM
Data Sourced
via Red Hat·12:00 AM
RemedyDescriptionAffected Software
Advisory Published
via Red Hat·08:05 AM
Frequently Asked Questions
1
What is the severity of RHSA-2024:4716?
The severity of RHSA-2024:4716 is classified as moderate.
2
How do I fix RHSA-2024:4716?
To fix RHSA-2024:4716, update the OpenSSH packages to version 8.7p1-30.el9_2.7 or later.
3
Which systems are affected by RHSA-2024:4716?
RHSA-2024:4716 affects Red Hat Enterprise Linux for various architectures including x86_64, Power, and IBM z Systems.
4
What components are included in the RHSA-2024:4716 update?
The RHSA-2024:4716 update includes security fixes for OpenSSH client, server, and related packages.
5
Is RHSA-2024:4716 related to remote code execution vulnerabilities?
Yes, RHSA-2024:4716 addresses potential remote code execution vulnerabilities in OpenSSH.