Date: Thu, 3 Nov 2016 11:41:01 +0200 From: Kimmo Paasiala <kpaasial@gmail.com> To: Martin Simmons <martin@lispworks.com> Cc: freebsd-security <freebsd-security@freebsd.org> Subject: Re: FreeBSD Security Advisory FreeBSD-SA-16:33.openssh Message-ID: <CA%2B7WWSc%2B_Jjf%2BStVb2n367%2B7YSCw-RnGMTbT4nbaE88d_n57%2Bg@mail.gmail.com> In-Reply-To: <201611021357.uA2DvHMW003088@higson.cam.lispworks.com> References: <20161102075533.8BBA114B5@freefall.freebsd.org> <201611021357.uA2DvHMW003088@higson.cam.lispworks.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Both 10.1 and 10.2 are going to be unsupported by the end of this year, that's probably the reason the fix was not included in them. https://www.freebsd.org/security/#sup -Kimmo On Wed, Nov 2, 2016 at 3:57 PM, Martin Simmons <martin@lispworks.com> wrote: >>>>>> On Wed, 2 Nov 2016 07:55:33 +0000 (UTC), FreeBSD Security Advisories said: >> >> ============================================================================= >> FreeBSD-SA-16:33.openssh Security Advisory >> The FreeBSD Project >> >> Topic: OpenSSH Remote Denial of Service vulnerability >> >> Category: contrib >> Module: OpenSSH >> Announced: 2016-11-02 >> Affects: All supported versions of FreeBSD. >> Corrected: 2016-11-02 06:56:35 UTC (stable/11, 11.0-STABLE) >> 2016-11-02 07:23:19 UTC (releng/11.0, 11.0-RELEASE-p3) >> 2016-11-02 06:58:47 UTC (stable/10, 10.3-STABLE) >> 2016-11-02 07:23:36 UTC (releng/10.3, 10.3-RELEASE-p12) >> CVE Name: CVE-2016-8858 > > Should this be corrected in 10.1-RELEASE as well? > > I ask because Debian > (https://security-tracker.debian.org/tracker/CVE-2016-8858) has marked it as > vulnerable in OpenSSH 6.0 and OpenSSH 6.7 and it looks like 10.1-RELEASE > contains OpenSSH 6.6, which I assume is also vulnerable. > > __Martin > _______________________________________________ > freebsd-security@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CA%2B7WWSc%2B_Jjf%2BStVb2n367%2B7YSCw-RnGMTbT4nbaE88d_n57%2Bg>