Update Openssh to Version 9.8p1 (CVE-2024-6387) in Long Term Support Release 2024.02.x
The fix for CVE-2024-6387, updating to OpenSSH 9.8p1, is in mainline but hasn't been ported to either of the stable releases yet. 2024.02.x 2024.05.x. Between version 9.7 and 9.8 an additional binary required for sshd to work correctly was added so in addition to updating the version the following line needs to be added to the define OPENSSH_INSTALL_SERVER_PROGRAMS section...
$(INSTALL) -D -m 0755 $(@D)/sshd-session $(TARGET_DIR)/usr/libexec/sshd-session
https://www.qualys.com/regresshion-cve-2024-6387/ https://gitlab.com/buildroot.org/buildroot/-/blob/master/package/openssh/openssh.mk https://gitlab.com/buildroot.org/buildroot/-/blob/2024.02.x/package/openssh/openssh.mk?ref_type=heads