Talk:RegreSSHion

Latest comment: 3 months ago by 91.221.91.18 in topic Add information about CVE-2024-6409

To-do: Add content from other sources

edit

The major source being mentioned currently is Qualys. However, it would help if other reputable sources could be mentioned as well. 119SolidBio (talk) 02:34, 16 July 2024 (UTC)Reply

Remove discovery date.

edit

The discovery date is not explicitly known as the report states the OpenSSH developers were contacted prior to the release. More information would have to be found. 119SolidBio (talk) 13:22, 16 July 2024 (UTC)Reply

Add information about CVE-2024-6409

edit

CVE-2024-6409 is a similar vulnerability that was discovered alongside with CVE-2024-6387, but was reported on a later date due to disclosure obligations, and applies to a different version range. It does not technically fall under regreSSHion (due to not being a regression vulnerability), and does not seem to be edited into most regreSSHion reports, but seems similar enough to mention. Can't link to the original disclosure email on the Openwall mailing list due to the filters, so here's a relevant article instead. — Preceding unsigned comment added by 91.221.91.18 (talk) 07:02, 19 July 2024 (UTC)Reply