OpenSSH 9.9p2 update with the removal of the possibility to perform a MITM attack
A corrective release of OpenSSH 9.9p2 has been made available, which addresses two vulnerabilities identified by Qualys. An example of exploiting these vulnerabilities for a MITM attack was demonstrated, allowing traffic intended for an SSH server to be redirected to a malicious server, bypass the host key verification, and create the illusion for the client that they are connected to the desired server (the ssh client will accept the host key of the fake server instead of the key [...])
