net-misc/openssh: Backport patch for CVE-2024-6387

[sayanchowdhury]

Backport patch for CVE-2024-6387

• Changelog entries added in the respective changelog/ directory (user-facing change, bug fix, security fix, update)
• Inspected CI output for image differences: /boot and /usr size, packages, list files for any missing binaries, kernel modules, config files, kernel modules, etc.

Related to: flatcar/Flatcar#1487
CI: http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/4224/cldsv/

[sayanchowdhury]

http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/4222/cldsv/

[github-actions]

Build action triggered: https://github.com/flatcar/scripts/actions/runs/9756375965

[t-lo]

@tormath1 Jenkins build failed with:

16:55:42 ERROR image_to_vm.sh: Invalid format: akamai

The LTS build tried to build akamai images it seems: http://jenkins.infra.kinvolk.io:8080/job/container/job/vms/5852/

[tormath1]

@tormath1 Jenkins build failed with:

16:55:42 ERROR image_to_vm.sh: Invalid format: akamai

The LTS build tried to build akamai images it seems: http://jenkins.infra.kinvolk.io:8080/job/container/job/vms/5852/

@t-lo yes, I already restarted the build 50 minutes ago: http://jenkins.infra.kinvolk.io:8080/job/container/job/packages_all_arches/4224/cldsv/ - the tag was lts-9999.9.9-sayan-openssh-lts-backport so the version was greater than 4001 (https://github.com/flatcar/jenkins-os/blob/026acdc7516047f141499aa5bfe5428e2f803326/container/vms.groovy#L87)

[t-lo]

Thank you @tormath1 !