OpenSSH Vulnerability(CVE-2024-6387)

Robotics & Edge Computing Jetson & Embedded Systems Jetson AGX Orin
,
1

Hello,

There seems to be a vulnerability issue with OpenSSH,
Do you have any plans to address this issue in future releases of Jetpack?

CVE-2024-6387 | Ubuntu

3

Let me forward this issue to internal team to confirm whether it impacts the current JetPack SW, will update to you once clarified. Thanks

4

By the update from itnernal team, we are evaluating, and we will pick up the fixes in the next releases.
Thanks

6

Thank you for your information.

Is this going to be fixed in both Jetpack 5.1.4 and Jetpack 6.1?

7

Per https://ubuntu.com/security/CVE-2024-6387, Ubuntu focal is not vulnerable, so just Ubuntu jammy has fix released.
We upgraded all packages for all Ubuntu 20.04/22.04 samplefs flavors on 7/7/2024, and openssh-server package was already the latest version with the fix.

This is an openssh server issue.
There should be no firmware was impacted by this issue.

Above are the latest comments from internal team.

So once we have newer release - Jetpack 5.1.4 and Jetpack 6.1, that will not be an issue.

8

Thank you for your information!

9

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.