← ServerPilot Docs

Upgrading OpenSSH on Ubuntu LTS

If you receive a PCI compliance warning telling you to update to the most recent version of OpenSSH, your PCI scanner is most likely showing a false positive.

OpenSSH 6.6 is the most recent version on Ubuntu 14.04.

OpenSSH 7.2 is the most recent version on Ubuntu 16.04.

OpenSSH 7.6 is the most recent version on Ubuntu 18.04.

OpenSSH 8.2 is the most recent version on Ubuntu 20.04.

OpenSSH 8.9 is the most recent version on Ubuntu 22.04.

Like all major Linux distributions, Ubuntu backports security and bug fixes specifically so it does not break application compatibility by changing versions between distribution releases.

You do not and should not take any action to change your server.

Instead, let the PCI scanner know the version of Ubuntu you are running and the version of OpenSSH you have installed, which you can find with the following commands:

lsb_release -r

dpkg --list openssh-server

You can also provide the scanner with these links showing the version numbers of the latest OpenSSH releases from Ubuntu below.

Ubuntu 14.04:
https://launchpad.net/ubuntu/trusty/+source/openssh/+changelog

Ubuntu 16.04:
https://launchpad.net/ubuntu/xenial/+source/openssh/+changelog

Ubuntu 18.04:
https://launchpad.net/ubuntu/bionic/+source/openssh/+changelog

Ubuntu 20.04:
https://launchpad.net/ubuntu/focal/+source/openssh/+changelog

Ubuntu 22.04:
https://launchpad.net/ubuntu/jammy/+source/openssh/+changelog

Do not attempt to replace OpenSSH on your server with any other version. If you do, ServerPilot will not be able to provide support for any breakage this may cause.
Last updated: June 2, 2022

Launch your first site in 5 minutes