BSD PortsOpenSSH -- Multiple vulnerbilities
The OpenSSH project reports: ssh-agent(1): fix an interaction between agent locking and the [email protected] extension that is used to identify forwarded agents. ssh(1): avoid potential realloc use-after-free in the client if a remote forwarding is added via the local session multiplexing socket while a remote forwarding open request is pending with the server. sshd(8): make the authorized_keys "restrict" …
Affected versions
- openssh-portable < 10.5.p1,1
By system
0 still vulnerable, 1 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.
| System | Port | Version | State | Fixed |
|---|---|---|---|---|
| FreeBSD | security/openssh-portable | 10.6.p1,1 | fixed | |
| MidnightBSD | security/openssh-portable | 10.5.p1,1 | out of range, by version |