How often does OpenSSH Get Updated on 3cx? v20

[UCMUserAZ]

Hi all. Been testing out v20 Enterprise 3cx. Great features. As we review, our Security team wanted to inquire how often the OpenSSH is patched or updated? Looks like OpenSSH is on 9.2p1 currently for v20 update 1 (build 673 beta). Do we know when the next OpenSSH update will come?

 

[VoIPTools]

Hey @Agathocles Prodromou I just wanted you to know that we all REALLY appreciate your contributions to the forums. You are doing an awesome job! Having official statements from 3CX is gold.

 

[Jeremy Nelson]

Any news on addressing "regreSSHion" CVE-2024-6387?

 

[UCMUserAZ]

In Debian land the fixed version for Debian 12: 1:9.2p1-2+deb12u3 just went into the stable-sec repository today on 07-01-2024. I would guess that it will have to go thru the various 3cx testing before we see it available. I believe I saw in earlier post only approved patches in the stable repository are released. Maybe includes stable-security repository as well once tested?

 

[Agathocles Prodromou]

In Debian land the fixed version for Debian 12: 1:9.2p1-2+deb12u3 just went into the stable-sec repository today on 07-01-2024. I would guess that it will have to go thru the various 3cx testing before we see it available. I believe I saw in earlier post only approved patches in the stable repository are released. Maybe includes stable-security repository as well once tested?

Hi,

Regarding the OpenSSH update in question (which fixes CVE-2024-6387), we're planning to test and release it with priority asap (for Debian 12). In the meantime, please ensure that you don't have SSH exposed to the world.

 

[UCMUserAZ]

Hi,

Regarding the OpenSSH update in question (which fixes CVE-2024-6387), we're planning to test and release it with priority asap (for Debian 12). In the meantime, please ensure that you don't have SSH exposed to the world.

You all are fast. I see the new updates released already and the openssh fix. Thank you!

 

[UCMUserAZ]

New updates applied. No issues. Thanks again.