-3

The versions of OpenSSH up to 4.4p1, plus versions from 8.5p1 to 9.7p1 running on glibc-Linux, are vulnerable. The latest version on Openssh was released on July 1, 2024. So when will the latest version of OpenSSH be available in Ubuntu versions 20.04, and 22.04?

Please make this as soon as possible, because the compile installation has some security issues. So it will be good if Ubuntu officially releases the latest version.

https://www.openssh.com/releasenotes.html

muru
  • 207,228
Nidhin Unni
  • 3
  • 1
  • 1
  • 2

1 Answers1

3

In future, before asking similar questions, check out Ubuntu CVE Reports. Chances are, the patch is already applied to the appropriate package in Ubuntu.


The versions of OpenSSH up to 4.4p1, plus versions from 8.5p1 to 9.7p1 running on glibc-Linux, are vulnerable.

Ubuntu developers already backported the patch in the older version of openssh to stop the vulnerability. Update Ubuntu with the following commands to get this security update (if you already haven't).

sudo apt update
sudo apt full-upgrade

The latest version on Openssh was released on July 1, 2024. So when will the latest version of OpenSSH be available in Ubuntu versions 20.04, and 22.04?

It will not happen. Ubuntu does not update the version of the software (unless it is a browser/email client). Instead, the developers backport the appropriate security patches into the older version of software available in Ubuntu. Please read Why don't the Ubuntu repositories have the latest versions of software? to know why.

Please make this as soon as possible, because the compile installation has some security issues.

No, Ubuntu has already backported the patch to fix the vulnerability.