Microsoft Security Guidance CVE-2024-6387: OpenSSH regreSSHion
Ninguém assumiu esta issue ainda.
Avaliação
- Dificuldade
- 1/5
- Tempo estimado
- Menos de uma hora
- Facilidade para iniciantes
- 5/100
- Tipo de issue
- Documentação
- Clareza
- Precisa de esclarecimento
- Status de atividade
- Estagnada
- Domínio
- security
Direção de pesquisa
This is a Microsoft security advisory post, not a code task, and it names no file, test or entry point to change. It states that Win32-OpenSSH is not affected by CVE-2024-6387, and the body only points to the repository's security policy and discussions. The issue doesn't say what a contributor should change, so there is no clear finish line.
Escrita pelo modelo de indexação a partir do texto da issue.
Descrição
Microsoft Security Guidance CVE-2024-6387: OpenSSH regreSSHion
Executive Summary
Win32-OpenSSH is not affected by this vulnerability. Although Windows contains an OpenSSH component, the vulnerable code cannot be exploited or controlled by an adversary.
Discussion
Please open a discussion question to discuss this guide.
Affected Software
Not Applicable.
Advisory FAQ
Other Information
Reporting Security Issues
If you have found a potential security issue in Win32-OpenSSH, please see our Security Policy
Support
Support for Win32-OpenSSH is delivered via traditional Microsoft support agreements, including paid support, Microsoft Enterprise Agreements, and Microsoft Software Assurance. You can also pay for assisted support for Win32-OpenSSH by filing a support request for your problem.
For community support, you can ask questions about this issue on GitHub in the Win32-OpenSSH repository. This is located at https://github.com/PowerShell/Win32-OpenSSH/discussions.
Disclaimer
The information provided in this advisory is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
External Links
CVE-2024-6387
Revisions
V1.0 (July 11, 2024): Advisory published.
Version 1.0
Last Updated 2024-07-11
- Linguagem predominante
- Sem dados de linguagem
- Estrelas
- 20
- Forks
- 8
- Métricas de merge de PRs
- Nenhum PR com merge em 30d
Preparar o ambiente
- Sem Dockerfile nem arquivo Docker Compose
- Sem modelo de pull request
- Ler o guia de contribuição
Primeiros passos
- Leia a issue inteira e depois o guia de contribuição do projeto.
- Comente na issue dizendo que vai assumir — evita que duas pessoas façam o mesmo trabalho.
- Faça um fork do repositório e trabalhe em uma branch.
- Abra um pull request que referencie o número da issue.
Mais de PowerShell/Announcements
-
PowerShell Security
Dificuldade 5/5 Mais de uma semana Facilidade para iniciantes 5/100
PowerShell/Announcements#101 ·
-
PowerShell Security
Dificuldade 5/5 Mais de uma semana Facilidade para iniciantes 5/100
PowerShell/Announcements#100 ·
-
PowerShell Security
Dificuldade 2/5 Menos de uma hora Facilidade para iniciantes 8/100
PowerShell/Announcements#99 ·
-
PowerShell Security
Dificuldade 3/5 Meio dia Facilidade para iniciantes 8/100
PowerShell/Announcements#98 ·
-
PowerShell Security
Dificuldade 2/5 Menos de uma hora Facilidade para iniciantes 8/100
PowerShell/Announcements#97 ·
Todas as issues de PowerShell/Announcements
Issues semelhantes
-
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 70/100
-
stage 2: bare names resolve against PATH differently from the shell (empty and relative entries)Aberta
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 82/100
STRML/omp-classifier#206 ·
Mantenedores costumam responder em até 1 dia
-
Dificuldade 1/5 Menos de uma hora Facilidade para iniciantes 95/100
weavefox/awesome-opc#29 ·
Mantenedores costumam responder em até 1 dia
-
Dificuldade 1/5 Menos de uma hora Facilidade para iniciantes 82/100
davepoon/buildwithclaude#618 ·
Mantenedores costumam responder em até 1 dia
-
area:security enhancement priority:medium size:small
Dificuldade 2/5 1-3 horas Facilidade para iniciantes 72/100
RonaldHensbergen/composable-data-stack#1030 ·
Mantenedores costumam responder em até 1 dia