CSS 11500 - Old OpenSSH Version?

[Patrick0711]

I have a CSS11501S-C-K9 that is running Safe Harbor code version 08.10.2.05 and I see that it is using SSH version OpenSSH_3.0.2p1.

As I understand it, the CSS11501S-C-K9 is still a fully supported device with no EOL date announced.  If this is the case, are there any plans to upgrade the OpenSSH version to a more recent version?

How should vulnerabilities associated with an older OpenSSH version be dealt with if the OpenSSH version is not going to be updated in the future?

[Gilles Dufour]

We do not upgrade the openssl, so the version does not change.

All known vulnerabilities are fixed one by one.

So, do not rely on the version that you see.

Gilles.