[talk] unpatched SSHD vulnerabilities in FreeBSD?

[Eitan Adler]

+secteam

On 28 December 2017 at 12:11, Pete Wright <pete at nomadlogic.org> wrote:
>
>
> On 12/28/2017 07:59, George Rosamond wrote:
>>
>> I noticed this in from a recent Trustwave audit, but it seems that
>> CVE-2017-15906 has gone unpatched in FreeBSD, and maybe CVE-2016-10012.
>> Am I missing something?
>>
>> They don't show up on the advisories page.
>
>
> yea it looks like neither of these fixes have been applied to 11-RELEASE,
> and CVE-2017-15906 would seem to be vulnerable on 12-CURRENT from what i can
> tell.  Maybe submit a PR if you have time?




-- 
Eitan Adler