A severe vulnerability in OpenSSH, dubbed "regreSSHion" (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing

cross-posted from: https://lemmy.pt/post/5733711

A severe vulnerability in OpenSSH, dubbed “regreSSHion” (CVE-2024-6387), has been discovered by the Qualys Threat Research Unit, potentially exposing

    • @[email protected]
      14•10 months ago

      They could get RasPis below 4th gen running outdated software, I guess. I think I read elsewhere that Debian already had a patch out some time ago, so that number is also likely diminishingly small.

        • oKtosiTe
          4•10 months ago

          Most images and distros are just Raspbian at their core and as such are pretty easy to upgrade.

          I upgraded my homebridge/pihole from Bullseye to Bookworm just a few days ago and it went off without a hitch.

          • @[email protected]
            3•10 months ago

            Did the same with raspi3… It broke too many things for me and couldn’t be restarted. I then completely reinstalled it.

            • oKtosiTe
              2•10 months ago

              Aww that sucks. To be fair I did take a full image backup before attempting the upgrade in case something went awry.

              • @[email protected]
                2•10 months ago

                I also had a complete backup, but I was also considering reinstalling it at the time anyway. Accordingly, only partially restored data. But you should definitely make a backup, that’s true.