Skip to content
OpenAdvisories
High RHSA-2024:4716 1 CVE

Red Hat Security Advisory: openssh security update

Published Sep 12, 2024 · Updated Oct 15, 2026

Ecosystem: Red Hat

Fixed packages 22

ReleasePackageFixed in
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-askpass 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-askpass-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-clients-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-debugsource 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-keycat-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-server-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream openssh-sk-dummy-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream pam_ssh_agent_auth 0:0.10.4-5.30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::appstream pam_ssh_agent_auth-debuginfo 0:0.10.4-5.30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-askpass-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-clients 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-clients-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-debugsource 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-keycat 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-keycat-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-server 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-server-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos openssh-sk-dummy-debuginfo 0:8.7p1-30.el9_2.7
Red Hat · RHEL 9.2 EUS rhel_eus:9.2::baseos pam_ssh_agent_auth-debuginfo 0:0.10.4-5.30.el9_2.7

Vulnerabilities 1

  • High 7.0
    CVE-2024-6409 EPSS 28%

    Openssh: possible remote code execution due to a race condition in signal handling affecting red hat enterprise linux 9

    A race condition vulnerability was discovered in how signals are handled by OpenSSH's server (sshd). If a remote attacker does not authenticate within a set time period, then sshd's SIGALRM handler is called asynchronously. However, this signal handler calls …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2295085
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4716.json
  • report
    https://access.redhat.com/security/cve/CVE-2024-6409
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2024-6409
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2024-6409