OpenSSH (regreSSHion) vulnerability CVE-2024-6387

Issue

Does CloudLinux vulnerable to OpenSSH "regreSSHion" vulnerability CVE-2024-6387?

Environment

• CloudLinux

Solution

CloudLinux 6/7/8 is not affected. 

For CloudLinux 9, install the latest openssh package, or at least openssh-8.7p1-38.el9.alma.2  

Cause

OpenSSH vulnerability CVE-2024-6387

Useful links

https://almalinux.org/blog/2024-07-01-almalinux-9-cve-2024-6387/ 

https://access.redhat.com/security/cve/cve-2024-6387