CVE-2024-6387 (regreSSHion) workaround from Qualys

readme.md

Warning: execute at your own risk

CVE-2024-6387 (regreSSHion) workaround from Qualys

Source: https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt

ansible-playbook -i hosts.ini -u root update_ssh.yml

update_ssh.yml

---
- name: Update SSH configuration
  hosts: all
  become: yes
  tasks:
    - name: Append LoginGraceTime to sshd_config
      shell: echo 'LoginGraceTime 0' | tee -a /etc/ssh/sshd_config

    - name: Restart SSH service
      service:
        name: ssh
        state: restarted
# Warning: execute at your own risk
# CVE-2024-6387 (regreSSHion)
# Source: https://www.qualys.com/2024/07/01/cve-2024-6387/regresshion.txt