Unable to update openssh

[jotterson]

Getting PCI Compliance failures

[mcox]

A customer of ours is getting PCI Compliance erros from Trustwave, regarding CVE-2014-3532 and CVE-2014-2653. Ive tried updating openssh but I get this:

yum install openssh-server

Loaded plugins: fastestmirror, priorities, rhnplugin, security

Setting up Install Process

Loading mirror speeds from cached hostfile

* cloudlinux-x86_64-server-6: cl.banahosting.com

Package openssh-server-5.3p1-112.el6_7.x86_64 already installed and latest version

Nothing to do

Anyone have any ideas?
Thank you.

[sqh]

You will have to document your backported patches for the scanning vendor, and they will give you a pass.

See https://documentation.cpanel.net/dis...tware+Versions

[mcox]

Great, thank you.