On Wed, Jul 22, 2026 at 11:27:48AM +0200, Raimo Niskanen wrote:
> remedy by upgrading to OpenSSH 10.4.

Source archives for newer versions of OpenSSH are available from:

https://www.openssh.org/openbsd.html

If you cannot upgrade and have mitigated the security issues in some other
way, then removing or changing the version information from the protocol
banner might prevent false alerts from security scanners.

That can be done with a combination of editing SSH_VERSION in version.h and
the VersionAddendum option in sshd_config.

Reply via email to