[Solved] Bookworm OpenSSH CVE upgrade kept back

I have run an apt upgrade of my Debian 12 bookworm machine. However, I notice that the necessary openssh packages have been held back.

Fix Openssh vulnerability CVE-2023-28531 : r/debian - Reddit

Is there a way to fix on Debian 12 Bookworm the openssh server and client vulnerability ? ... There is a 9.3 version already on Ubuntu, is there a ...

"The following packages have been kept back:" Why and how do I ...

A more aggressive solution is to run sudo apt-get dist-upgrade , which will force the installation of those new dependencies. But dist-upgrade ...

Packages with security updates kept back - Forum - openmediavault

Package libkrb5support0 is kept back because a related package is kept back or due to local apt_preferences(5). Package openssh-client is kept ...

Update version OpenSSH | current vulnerable version

I assume you're referring to CVE-2023-51385 as well as CVE-2023-51384? Both should be fixed in the bookworm-security version already, since the ...

Re: CVE-2023-28531 openssh-server fix? - Ubuntu Forums

If you can't wait for the backport to be finished, then you can compile it yourself and track when the backport is completed. Then switch back ...

Urgent Debian Security Update: OpenSSH Vulnerability - 3CX

Attention 3CX Version 20 (Debian 12 Bookworm) users. ... A critical vulnerability has been discovered in OpenSSH ("regreSSHion" - CVE-2024-6387).

Are all Debian 11 systems automatically vulnerable to CVE-2023 ...

I tried sudo apt update && sudo apt full-upgrade but it did not update the OpenSSH version.. ... @IporSircer oh sweet baby Jesus, so even bookworm ...

CVE-2024-6387 | Arctic Wolf

Upgrade Distribution-Specific OpenSSH Packages ; Fedora 34 to 40, Yes ; Debian, Bullseye, No ; Debian · Bookworm, Yes ; Debian · Sid, No ; Debian ...

Alert: Remote Code Execution Vulnerability (CVE-2024-6387) found ...

Update for Debian GNU/Linux 12 (Bookworm) openssh-server_9.2p1-2+ ... Stay tuned for updates! You can also detect this vulnerability in your network ...

HOWTO: Upgrade Raspberry Pi OS from Bullseye to Bookworm

# Ciphers [email protected] # Disabled due to CVE-2023-48795 for now ... Put the SDcard back into your Raspberry Pi and check if the problem is ...

Chapter 5. Issues to be aware of for bullseye - Debian

... kept back during upgrades. Running the steps discussed in Section 4.4.5 ... upgrade openssh-server before upgrading the full system. 5.1.24. Open ...

“RegreSSHion” vulnerability in OpenSSH gives attackers root on Linux

... CVE or coming up with the clever way to mash SSH and regression together. ... The OpenSSH update came a few days after 12.6 update I believe. You ...

SSH upgrade for money? - Proxmox Support Forum

openssh (1:9.2p1-2+deb12u1) bookworm; urgency=medium * Cherry-pick from OpenSSH 9.3p2: - [CVE-2023-38408] Fix a condition where specific ...

[Fixed] "following packages have been kept back" Error in Ubuntu

When you see 'xyz package has been kept back' message, it means that update on xyz package is being phased and your system is not getting it in the present ...

RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux ...

Once I'd finished upgrading my openssh instances ... I think this is problematic because it causes bounty hunters to keep theoretical vulnerabilities ...

Updated Debian 12: 12.1 released

Security update [CVE-2022-2211]. indent, Restore the ROUND_UP macro ... fix stored XSS in Task External Link functionality [CVE-2023-33969].

Fixing "the following packages have been kept back" Ubuntu Error

Bhagwad Park · 1. Package Upgrade Needs to Install or Remove Other Packages · 2. Held Packages · 3. Conflicts with Existing Packages.

Bump the nginx-abi- number to 1.25.5-1 to fix the broken ...

04.1+deb.sury.org+1 is to be installed E: Unable to correct problems, you have held broken packages. apt-get install nginx=1.25.4- ...

Page 2 | Random thoughts of a Linux sysadmin - Frederik Himpe

I already upgraded some of my server systems to Bookworm and I'm also running on all my desktop systems, so here are some notes of the upgrade process. Keep in ...