# CVE-2024-6387 - Urgently review OpenSSH Service versions in self-managed environments

**URL:** <https://forum.dimagi.com/t/cve-2024-6387-urgently-review-openssh-service-versions-in-self-managed-environments/10936>\
**Category:** Maintainer Announcements\
**Created:** [July 2, 2024, 3:11pm UTC](https://forum.dimagi.com/t/cve-2024-6387-urgently-review-openssh-service-versions-in-self-managed-environments/10936 "2024-07-02T15:11:28Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Clayton\_Sims](https://dimagi.b-cdn.net/user_avatar/forum.dimagi.com/clayton_sims/32/496_2.png) [@Clayton\_Sims](https://forum.dimagi.com/u/Clayton_Sims)\
**Post date:** [July 2, 2024, 3:11pm UTC](https://forum.dimagi.com/t/cve-2024-6387-urgently-review-openssh-service-versions-in-self-managed-environments/10936/1 "2024-07-02T15:11:28Z")

</div>

This is a reminder for all organizations managing a CommCare environment to review your hosts for vulnerability to a recently announced [critical CVE](https://www.qualys.com/regresshion-cve-2024-6387/) in the OpenSSH server.

This service is managed outside of the CommCare Cloud infrastructure layer, and teams will need to respond according to their own operations and patching playbook, but we are providing this message to raise visibility of this important issue.

Dimagi’s production cloud instances were patched upon announcement by our security automation infrastructure, and no action is required for users or admins of these systems.

---

<div class="post-metadata">

**Author:** ![Clayton\_Sims](https://dimagi.b-cdn.net/user_avatar/forum.dimagi.com/clayton_sims/32/496_2.png) [@Clayton\_Sims](https://forum.dimagi.com/u/Clayton_Sims)\
**Post date:** [July 2, 2024, 3:12pm UTC](https://forum.dimagi.com/t/cve-2024-6387-urgently-review-openssh-service-versions-in-self-managed-environments/10936/2 "2024-07-02T15:12:35Z")

</div>