diff --git a/pkgs/openssh/version.json b/pkgs/openssh/version.json
index e4c116c..fbb6ee8 100644
--- a/pkgs/openssh/version.json
+++ b/pkgs/openssh/version.json
@@ -1,8 +1,8 @@
 {
   "owner": "openssh",
   "repo": "openssh-portable",
-  "rev": "fe6c6330c1a94c7a537efe9069853ce7a275c50a",
-  "hash": "sha256-ttAenj5SJ0Bi7HoJQtChbYSelpp5aAuPoT07E38asl0=",
-  "version": "2024-10-13",
-  "comment": "upstream: don't start the ObscureKeystrokeTiming mitigations if"
+  "rev": "98a0883bdef28a06c7e017f27adf21ba57898bf4",
+  "hash": "sha256-JkVvbmLc1Ur9qtixqZD/P+uNNC5O5pg0pnMQaVSOV9Y=",
+  "version": "2024-10-14",
+  "comment": "fix capsicum sandbox"
 }