I think the answer is they are resolved in Mavericks, but not in previous releases (and potentially never will be). Apple’s security policy is really disappointing. As another example, the unicode bug that could crash iOS 6 was never patched. The code was rewritten for iOS 7, but if you’ve decided to stick with 6 for any reason, you’re out of luck.
Problems with Apple are twofold: They patch things slowly, even after public disclosure of the bug. And then they only patch the most recent version, meaning you can’t actually just apply the patch. So if a new beta release has been announced, but not released, you’re basically hosed until the new version is released.
I wish Apple had updated (compiled support in?) ssh with ecdsa support with Mavericks. Still have to install it with homebrew to get it. :(
[Comment removed by moderator jcs: don't quote the entire article]
I think the answer is they are resolved in Mavericks, but not in previous releases (and potentially never will be). Apple’s security policy is really disappointing. As another example, the unicode bug that could crash iOS 6 was never patched. The code was rewritten for iOS 7, but if you’ve decided to stick with 6 for any reason, you’re out of luck.
Problems with Apple are twofold: They patch things slowly, even after public disclosure of the bug. And then they only patch the most recent version, meaning you can’t actually just apply the patch. So if a new beta release has been announced, but not released, you’re basically hosed until the new version is released.