Alerts This Week
Warning Icon 1 1,220
Alerts This Week
Warning Icon 1 1,220

Debian 12: DSA-5868-1 moderate: openssh machine-in-the-middle attack

debian
Calendar Grey February 18, 2025
Debian Logo
Debian Security Notice DSA-5868-1 informs users about OpenSSH client flaws that could enable man-in-the-middle exploits.
The Qualys Threat Research Unit (TRU) discovered that the OpenSSH client is vulnerable to a machine-in-the-middle attack if the VerifyHostKeyDNS option is enabled (disabled by defa...
Topics%20covered

Topics Covered

security advisory moderate update debian Debian issue attack openssh intrusion machine-in-the-middle machine-in-the-middle attack

Summary

Details can be found in the Qualys advisory at
https://https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt

For the stable distribution (bookworm), this problem has been fixed in
version 1:9.2p1-2+deb12u5.

We recommend that you upgrade your openssh packages.

For the detailed security status of openssh please refer to its security
tracker page at:
https://security-tracker.debian.org/tracker/source-package/openssh

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/



Package: openssh
CVE ID: CVE-2025-26465

Topics%20covered

Topics Covered

security advisory moderate update debian Debian issue attack openssh intrusion machine-in-the-middle machine-in-the-middle attack

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here