CVE-2023-51385: OpenSSH vulnerability on PhotonOS 3

Products

• VMware Telco Cloud Automation
• VMware Telco Cloud Platform

Issue/Introduction

• Unable to upgrade away from Photon OS version 3.0
• Workaround for openssh vulnerability

Environment

TCA 3.x, 3.2

TCP 4.x, 5.0, 5.0.1

PhotonOS 3

Cause

Confirmed moderate openssh vulnerability - CVE-2023-51385

Resolution

VMware By Broadcom is aware of CVE-2023-51385.
Please refer to the release notes for existing and forthcoming product releases for any updates in relation to this CVE.
Should you require further information please contact Broadcom Support.