topic Re: OpenSSH verification and upgrade in Next-Generation Firewall Discussions

OpenSSH verification and upgrade

Ryan_Volante — Tue, 27 Feb 2024 07:29:57 GMT

Aside from checking in the OSS listing, how can i verify the current OpenSSH version installed on the Palo Alto device. Also how can we upgrade it to a recommended version?

Current firmware version: 10.2.6

Based on OSS listing, OpenSSH version is: 8.0p1

Re: OpenSSH verification and upgrade

Ryan_Volante — Tue, 27 Feb 2024 07:35:03 GMT

To give additional context:

The client ran a VAPT scan using Qualys, and based on the report it is affected by multiple Open SSH vulnerabilities. One of the recommendation is to Upgrade it to a OpenSSH version 9.6.

Re: OpenSSH verification and upgrade

rdumoulin — Tue, 27 Feb 2024 08:31:18 GMT

Hi @Ryan_Volante ,

to check the OpenSSH version, you can telnet to it on port 22, for instance:

telnet 192.168.0.253 22

SSH-2.0-OpenSSH_8.0

On the other hand, regarding any concern on vulnerabilities on open source software used in PAN-OS, I would advise you to send an email to our PSIRT team psirt@paloaltonetworks.com, you should receive a reply back within 2 business days.

Regards

--Richard