Quite right, my typo, and if I could still 'edit' my post I'd correct it. I meant OpenSSH: It could be that they plan to tell FreeBSD - and therefore expose w

Quite right, my typo, and if I could still 'edit' my post I'd correct it. I meant OpenSSH: It could be that they plan to tell FreeBSD - and therefore expose what they've found, now they've suddenly started auditing OpenSSH consumers - only when they have a fix? It could be best fixed in OpenSSH itself, and only affecting those using the compiler options or SSH configuration that FreeBSD ships with.