I have a question, recently one of our clients is worry about CVE-2016-8858 which affect ssh version 6.6p1.
I have run this command
rpm -q --changelog openssh | grep CVE-2016-8858
and nothing comes out.
does it mean my actual version of ssh it is not affected by this vulnerability...