OpenSSL Security Advisory [11 Jun 2015]

[Miroslav Lachman]

Michelle Sullivan wrote on 06/13/2015 14:48:
>
> PS: There is a workaround for ssh clients in /etc/ssh/ssh_config to stop
> it falling back to "insecure" protocols - though every freebsd-update
> attempts to change this file back to the default... fortunately I have
> puppet to reset the file in the event of me missing the update/reset.

You can add /etc/ssh/ssh_config to UpdateIfUnmodified in 
/etc/freebsd-update.conf
Then freebsd-update will not touch ssh_config anymore.

Miroslav Lachman