NetBSD-SA2024-002 OpenSSH CVE-2024-6387 `regreSSHion'

[Ramiro Aceves <ea1abz%gmail.com@localhost>]

Hello,

Not sure where I should post this, I think that there is an error in
the instructions for fixing sshd in the WEB page at:

http://ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2024-002.txt.asc

"""To apply a fixed version from a releng build, fetch a fitting base.tgz
or base.tar.xz from nycdn.NetBSD.org and extract the fixed binaries:

cd /var/tmp
ftp https://nycdn.NetBSD.org/pub/NetBSD-daily/REL/BUILD/ARCH/binary/sets/base.SUFX
cd /
tar xzpf /var/tmp/base.SUFX /usr/lib/libssh.so.46.1""

I was going to apply the fixed library that way and it fails saying
that cannot be found in archive.

I think that the last command should be:

tar xzpf /var/tmp/base.SUFX ./usr/lib/libssh.so.46.1

Regards.
Ramiro.