openSSH CVEs

Question

How can we best address updates for CVE's with the openSSH software?

Answer

The openSSH package is managed by the Operating System provider and is not installed or maintained by the cPanel software. The OS provider will release updates, and they can be applied through your package manager when they are available.

Additional Resources

PCI Compliance and Software Versions: OpenSSH