September 17

Debian has released an OpenSSH security updates intended for computers powered by the Debian Linux Operating System. The current OpenSSH version found in Debian has a Denial of Service vulnerability. It was discovered that the Debian version of OpenSSH server’s  signal handler implementing the login timeout uses functions which are not async-signal-safe that leads to denial of service vulnerability. An affected system suffers from tremendous amount of zombie sshd processes.

If your Debian system is running the old version of OpenSSH server, using root account and running the following commands will solve the problem:
# apt-get update
# apt-get upgrade

Popularity: 2% [?]