bump for openssh cve

UPDATING

@@ -1,6 +1,23 @@
 Updating Information for MidnightBSD users.
 
+20240701:
+	MidnightBSD 3.1.6
+
+	OpenSSH security vulnerability CVE-2024-6387
+
+	A signal handler in sshd(8) calls a function that is not async-signal-safe.
+	The signal handler is invoked when a client does not authenticate within the
+	LoginGraceTime seconds (120 by default).  This signal handler executes in the
+	context of the sshd(8)'s privileged code, which is not sandboxed and runs
+	with full root privileges.
+
+	This issue is a regression of CVE-2006-5051 originally reported by Mark Dowd
+	and accidentally reintroduced in OpenSSH 8.5p1.
+
+
 20240408:
+	MidnightBSD 3.1.5
+
 	unbound 1.19.3
 
 20240406:

sys/conf/newvers.sh

@@ -45,7 +45,7 @@
 # upper case variables starting in column 1 are on one line w/o continuation.
 
 TYPE="MidnightBSD"
-REVISION="3.1.5"
+REVISION="3.1.6"
 RELEASE="${REVISION}"
 VERSION="${TYPE} ${RELEASE}"