FRESSH BUGS UNDISCOVERED FOR YEARS THREATEN OPENSSH SECURITY

Summary from the TLDR InfoSec newsletter

OpenSSH has released patches for two new vulnerabilities: a machine-in-the-middle attack (CVE-2025-26465) and a denial-of-service bug (CVE-2025-26466), discovered by Qualys. While not critically severe, they affect this widely used secure connection tool.