Quantcast
Channel: Raspberry Pi Forums
Viewing all articles
Browse latest Browse all 3546

Raspberry Pi OS • Re: Pi 2 SSH CVE-2024–6387

$
0
0
Linux raspberrypi 6.1.21-v7+ is your current kernel version, not OS.
/etc/os-release will tell you the version of Raspberry Pi OS installed. I'm suspecting Bullseye based on the 6.1 kernel

https://security-tracker.debian.org/tra ... -2024-6387
The notes at the bottom include
[bullseye] - openssh <not-affected> (Vulnerable code introduced later)
Checking a system I have with 32bit Bullseye installed

Code:

pi@raspberrypi:~ $ apt policy openssh-server openssh-server:  Installed: 1:8.4p1-5+deb11u5  Candidate: 1:8.4p1-5+deb11u5  Version table: *** 1:8.4p1-5+deb11u5 500        500 http://raspbian.raspberrypi.org/raspbian bullseye/main armhf Packages        100 /var/lib/dpkg/status
So that is the latest version for Bullseye, appears to match yours, and the Debian devs say it isn't vulnerable to this CVE.

Statistics: Posted by 6by9 — Tue Oct 21, 2025 11:18 am



Viewing all articles
Browse latest Browse all 3546

Trending Articles