On Thu, 27 Jul 2017, Adam Weremczuk wrote: > These are the vulnerability I'm referring to and they have been addressed in > OpenSSH versions 6.6 and 7.2p2:
That’s *upstream* version numbers. As Roberto said, the LTS team will take those changes (and *only* those security-related fixes), backport them to the old wheezy version and upload that regularily to the wheezy-security suite. So, just use these packages. They bear an old *upstream* version number and lack the new *upstream* features, but they have all the security fixes backported. bye, //mirabilos -- tarent solutions GmbH Rochusstraße 2-4, D-53123 Bonn • http://www.tarent.de/ Tel: +49 228 54881-393 • Fax: +49 228 54881-235 HRB 5168 (AG Bonn) • USt-ID (VAT): DE122264941 Geschäftsführer: Dr. Stefan Barth, Kai Ebenrett, Boris Esser, Alexander Steeg