IPT SSH possible security issue

[Paul Austin]

Hi All, Not 100% on this but I have a customer who has been audited for security and the SSH version in the IPT servers has been highlighted as possible security concern. It is apparently version 8.3. Is there a question on this version and if so, can it be upgraded? We are using version 14.X UCM/IMP and Unity.

Thanks All

Paul

[b.winter · Accepted solution]

You cannot upgrade specific "packages" in CUCM/Unity, as it is not a "standard" Linux box, and you won't have access to it. So you cannot upgrade just the SSH application.
All the packages / applications used in CUCM / Unity are upgraded, when you upgrade the whole VM to a new version (e.g. 14 SU2 -> 14 SU3)

[Paul Austin]

Thanks - that was what I was thinking.