Merge lp:~lsandecki/ubuntu-motd/CVE-2024-6387 into lp:ubuntu-motd

[Lech Sandecki]

[Christian Ehrhardt  (paelzer)]

This is twice 22: "22.04 LTS, 23.10 and 22.04 LTS."

[Christian Ehrhardt  (paelzer)]

The former v99 was never merged, merging it now is a no-op, but I wanted to let you know.

[Christian Ehrhardt  (paelzer)]

You seem to be busy, I'll fix the second to be 24.04 LTS

[Christian Ehrhardt  (paelzer)]

Checked the links the URL and the wording - all LGTM.

[Christian Ehrhardt  (paelzer)]

22/24 checked via MM, fixed now

Question on the wording:
 "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems."

That is the title from qualys https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt

But since all of Ubuntu is glibc based this feels odd in the description.
The MITRE description is much more helpful

"Openssh: Possible Remote Code Execution Due To A Race Condition In Signal Handling"

If you want to keep the buzzword it could be:
"RegreSSHion: Possible RCE Due To A Race Condition In Signal Handling.",

Starting a discussion on MM about this ...

[Christian Ehrhardt  (paelzer)]

Out of the MM sync:

[15:44] <0xdsousa> [00e] "RegreSSHion: Possible RCE Due To A Race Condition In Signal Handling." :thumbsup_light_skin_tone:
[15:44] <lsandecki> [011] yes, thank you

Checker scripts are happy with that as well, merging

review: Approve

=== modified file 'aptnews.json'
--- aptnews.json	2023-10-06 12:27:30 +0000
+++ aptnews.json	2024-07-01 13:05:25 +0000
@@ -1,11 +1,11 @@
 {
     "messages": [
         {
-            "begin": "2023-10-06T00:00:00Z",
+            "begin": "2024-07-02T00:00:00Z",
             "lines": [
-                "Canonical released microcode updates for both Intel (CVE-2022-40982) and AMD",
-                "(CVE-2023-20593). ‘Unattended upgrades’ provide security updates by default.",
-                "Ensure it remains enabled to always get all updates as they become available."
+                "OpenSSH CVE-2024-6387 has been fixed for 22.04 LTS, 23.10 and 22.04 LTS.",
+                "RegreSSHion: RCE in OpenSSH's server, on glibc-based Linux systems.",
+                "For more details see: https://ubuntu.com/security/notices/USN-6859-1."
             ]
         }
     ]