Dear experts, regarding the CVE-2018-15473 dint find find official patch from the openssh on freebsd OS base. i found following relevant patch on openBsd based and applied on freeBsd. https://github.com/openbsd/src/commit/779974d35b4859c07bc3cb8a12c74b43b0a7d1e0 Could you please confirm the this is the appropriate patch share the POC of the same. Thanks and regards, Brahma
Brahmanand Reddy <brahma.gdb at gmail.com> writes:> regarding the CVE-2018-15473 dint find find official patch from the openssh > on freebsd OS base.CVE-2018-15473 is a user existence oracle bug which does not meet our criteria for security advisories. FreeBSD 12 has OpenSSH 7.8, which is patched. FreeBSD 11 has OpenSSH 7.5, which is not. DES -- Dag-Erling Sm?rgrav - des at FreeBSD.org