Debian Security Update DSA-5868-1 openssh - security update

[LinuxBot]

The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by default).
Details can be found in the Qualys advisory at https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt
https://security-tracker.debian.org/tracker/DSA-5868-1

Continue reading...