FreSSH bugs undiscovered for years threaten OpenSSH security

Brand new vulnerabilities in OpenSSHnew now have patches for CVE-2025-26465 and CVE-2025-26466. The vulnerabilities allow miscreants to perform machine-in-the-middle attacks on the OpenSSH client and pre-authentication denial-of-service attacks.