RLSA-2025:6993

RLSA-2025:6993 · Moderate: openssh security update

This page contains facts from public vulnerability sources. Check the original advisory before updating.

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: Machine-in-the-middle attack if VerifyHostKeyDNS is enabled (CVE-2025-26465) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Additional Changes: For detailed information on changes in this release, see the Rocky Linux 9 Release Notes linked from the References section.

CVSS 6.8 · Medium · Fix available

Published

2025-10-04T00:11:30.916420Z

Updated

2025-10-04T00:49:48.885201Z

Stack: system · network

Check your server →