OpenSSH is developed by the OpenBSD project and I have a lot more confidence in them than in any random "enterprise".
The issue in this case is that Linux distros took it upon themselves to alter its code base by linking in libsystemd (thus also liblzma) for the dubious benefit of better systemd integration, which comes with a generous helping of attack surface.
Comments
https://news.ycombinator.com/item?id=39904034
OpenSSH is developed by the OpenBSD project and I have a lot more confidence in them than in any random "enterprise".
The issue in this case is that Linux distros took it upon themselves to alter its code base by linking in libsystemd (thus also liblzma) for the dubious benefit of better systemd integration, which comes with a generous helping of attack surface.