home-assistant / addons

:heavy_plus_sign: Docker add-ons for Home Assistant
https://home-assistant.io/hassio/
Apache License 2.0
1.51k stars 1.47k forks source link

Update openssh to fix CVE-2024-6387 #3679

Closed alienff closed 2 months ago

alienff commented 2 months ago

Can we please have a new version of the openssh in the addon?.. Context.

agners commented 2 months ago

this vulnerability has the potential to allow remote unauthenticated code execution (RCE) for glibc-based Linux systems

The SSH add-on is based on Alpine, which uses musl. So no mitigation required.