Security Centmin Mod Security Updates OpenSSH (Terrapin Attack) & glibc iconv CVE-2024-2961

Centmin Mod 124.00stable and 130.00beta01 have been updated to handle 2 security vulnerabilities outlined below. Please see their respective dedicated threads for details.

• OpenSSH Terrapin Attack CVE-2023-48795 https://community.centminmod.com/th...-mitigation-for-centos-7-openssh-7-4p1.25045/. Classed as medium security and harder to exploit due to man in the middle requirements. Not fixed in CentOS 7's OpenSSH 7.4p1 hence needing Centmin Mod updates for mitigation. While fixed in AlmaLinux/Rocky Linux 8/9's OpenSSH versions.
• glibc <2.39's iconv module CVE-2024-2961 https://community.centminmod.com/th...2024-2961-vulnerability-mitigation-fix.25069/. Classed as high or critical severity. Needs immediate Centmin Mod update applied mitigations.

---