November 8, 2013 advisory:
http://www.openssh.org/txt/gcmrekey.adv
Apply by doing:
cd /usr/src
patch -p0 < 002_sshgcm.patch
Then build new sshd binaries:
cd /usr/src/usr.bin/ssh
make obj
make
make install
Then restart sshd:
/etc/rc.d/sshd restart
Index: usr.bin/ssh/monitor_wrap.c
===================================================================
RCS file: /cvs/src/usr.bin/ssh/monitor_wrap.c,v
retrieving revision 1.76
diff -u -p -u -r1.76 monitor_wrap.c
--- usr.bin/ssh/monitor_wrap.c 17 May 2013 00:13:13 -0000 1.76
+++ usr.bin/monitor_wrap.c 6 Nov 2013 16:31:26 -0000
@@ -469,7 +469,7 @@ mm_newkeys_from_blob(u_char *blob, int b
buffer_init(&b);
buffer_append(&b, blob, blen);
- newkey = xmalloc(sizeof(*newkey));
+ newkey = xcalloc(1, sizeof(*newkey));
enc = &newkey->enc;
mac = &newkey->mac;
comp = &newkey->comp;