Re: CVE-2024-6387

Marcus Meissner <[email protected]> Mon, 1 Jul 2024 16:11:43 +0200

Newsgroups	gmane.linux.suse.security
Organization	SUSE Software Solutions Ger many GmbH, Frankenstraße 146, 90461 Nuernberg, Ger many, GF: Ivo Totev, Andrew Myers, Andrew McDonald , Martje Boudien Moerman, HRB 36809, AG Nürnberg
Message-ID	<[email protected]>

Hi,

there is a page existing right now.

We have pushed a openssh update to openSUSE:Factory:Update for
Tumbleweed, available now.

SLES 15 SP6 and openSUSE Leap 15.6 update is in QA.

Older distros are not affected.

Note that this is really hard to exploit, and no exploitation success
was reported for 64 bit architectures.

Ciao, Marcus
On Mon, Jul 01, 2024 at 03:38:28PM +0200, Frank Steiner wrote:
> Hi,
> 
> can you give a statement on this CVE? It's not yet listed at
> https://www.suse.com/de-de/security/cve/
> 
> Thanks!
> 
> cu,
> Frank
> -- 
> Dipl.-Inform. Frank Steiner   Web:  http://www.bio.ifi.lmu.de/~steiner/
> Lehrstuhl f. Bioinformatik    Mail: http://www.bio.ifi.lmu.de/~steiner/m/
> LMU, Amalienstr. 17           Phone: +49 89 2180-4049
> 80333 Muenchen, Germany       Fax:   +49 89 2180-99-4049
> * Rekursion kann man erst verstehen, wenn man Rekursion verstanden hat. *

-- 
Marcus Meissner (he/him), Distinguished Engineer / Senior Project Manager Security
SUSE Software Solutions Germany GmbH, Frankenstrasse 146, 90461 Nuernberg, Germany
GF: Ivo Totev, Andrew McDonald, Werner Knoblich, HRB 36809, AG Nuernberg