I’m running a few Debian stable systems that are up to date on patches.

But I just ran ssh -V and the OpenSSH version listed is “OpenSSH_9.2p1 Debian-2+deb12u3” which as I understand is still vulnerable.

Am I missing something or am I good?

  • @TCB13
    2•3 months ago

    I know, I know, but trust me that a lot of people believe that they don’t issue security patches fast.