Scanners have gotten better recently, meaning they can tell the difference between water and explosives, but these restrictions weren’t pulled out of thin air like many others.
https://en.m.wikipedia.org/wiki/Security_repercussions_due_to_the_2006_transatlantic_aircraft_plot
There was a thwarted terrorist plot to use drink bottles to hold explosives.
You can read them as separate statements with the middle repeated and a logical AND between them:
If (8.5p1 <= your OpenSSH version) AND (your OpenSSH version < 9.8p1) Then you are vulnerable
It’s the same as saying if your OpenSSH version is between these two versions (including 8.5p1, but not 9.8p1), then you are vulnerable