Description:
OpenSSH has released a new version to address multiple vulnerabilities in various versions of OpenSSH. The details of the security update can be found at:
https://www.openssh.com/txt/release-9.9p2
Affected Systems:
- OpenSSH versions between 6.8p1 to 9.9p1 (inclusive)
Impact:
Successful exploitation of the vulnerabilities could lead to denial of service or spoofing on an affected system.
Recommendation:
Software update for affected systems is now available. Users of affected systems should follow the recommendations provided by the vendor and take immediate actions to mitigate the risk.
More Information:
- https://www.openssh.com/txt/release-9.9p2
- https://www.hkcert.org/security-bulletin/openssh-multiple-vulnerabilities_20250219
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-26465 (to CVE-2025-26466)
