Reblogged by cstanhope@social.coop ("Your friendly 'net denizen"):
tobiasgies@chaos.social ("Tobias Gies") wrote:
🚨 KLAXON NOISES 🚨
"unauthenticated remote code execution as root in OpenSSH" is a term that means I don't fuckin' need my morning coffee any more.
Qualys report: https://www.openwall.com/lists/oss-security/2024/07/01/3
Release notes: https://www.openssh.com/releasenotes.html#9.8p1
And a tip o' the hat to @hanno for the initial post about it: https://mastodon.social/@hanno/112710324891813998It looks like this advisory was coordinated with distributors and patches already released a few days ago, but just in case: Go forth and patch your shit!