Hi everyone,
I would like to ask the community some advice about regreSSHion.
regreSSHion, CVE-2024-6387, is an unauthenticated remote code execution in OpenSSH’s server (sshd) that grants full root access. It affects the default configuration and does not require user interaction. It poses a significant exploit risk.
I am running the latest updates:
* Core 2024.7.1
* Supervisor 2024.06.2
* Operating System 12.4
* Frontend 20240705.0
and the openSSH is still not yet patched:
[core-ssh ~]$ sshd -V
OpenSSH_9.6p1, OpenSSL 3.1.4 24 Oct 2023
I see that someone opened an issue to address it: Sshd Regresshion vulnerability · Issue #3460 · home-assistant/operating-system · GitHub
Is this, in fact an issue for HA? How big of an issue is it?
Is there anything that users can do to mitigate this issue until we get an OS update?
Thanks