CVE-2024-6387

[pkolega]

Version of sshd (SSH-2.0-OpenSSH_9.6) is vulnerable. The vulnerability allows for remote code execution as root due to async-signal-unsafe functions being called in the SIGALRM handler.

[Krazy998]

Consider using the debian image as a base. I have been using this for months now and as its effectively a debian image. All normal security and base image updates are easily covered:
scpcom has provided a debian image for the nanokvm which works perfectly. (I think it makes sense at some point to move to this to make it easier to maintain)

https://github.com/scpcom/sophgo-sg200x-debian