Dag-Erling Smørgrav wrote an old (hi)story about OpenSSH for FreeBSD
I am the current maintainer of OpenSSH for FreeBSD , and have been since 2002. I am also the author and maintainer of the PAM implementation used by FreeBSD , and of several of the accompanying PAM modules. Finally, I was a member of the FreeBSD Security Team for several years, served as Assistant Security Officer and Acting Security Officer, and authored or co-authored around 20 security advisories between 2002 and 2004.
I have been asked to comment on SecurityFocus advisories 7467 and 7482, regarding timing attacks against certain versions of OpenSSH that were distributed with FreeBSD 4.x and 5.x releases.
The short version is that no FreeBSD 4.x or 5.x release was ever vulnerable.