This one may be of interest for those using Open SSH

[kc1di]

New OpenSSH Vulnerability Exposes Linux Systems to Remote Command Injection

A recently patched flaw in OpenSSH (CVE-2023-38408) could allow remote attackers to run arbitrary commands on vulnerable hosts.

thehackernews.com

Make sure your SSH is up to date!

 

[KGIII]

Make sure your SSH is up to date!

Always!

Ideally, these become public knowledge after the fix has been pushed out. It's a matter of responsible disclosure. The good ones find a security issue and let the project know in private. They then wait. If the fix isn't sent out in time, they disclose the bug to the world. Otherwise, the bug is disclosed after they've shipped a fix for it.

I apply updates any time I see them, even if it would interrupt my workflow.

 

[kc1di]

Hi KGIII you may want to move this to security as That is where I meant to post it. But mistakenly posted to general.
Thanks.

 

[KGIII]

I can do that for you.

Consider it done, ayuh.