diff --git a/ansible/bootstrap.yml b/ansible/bootstrap.yml
index e9f6393e9..f8f536830 100644
--- a/ansible/bootstrap.yml
+++ b/ansible/bootstrap.yml
@@ -157,6 +157,20 @@
   tags:
     - update
   tasks:
+    - name: Install SIG/security release repo
+      dnf:
+        name: rocky-release-security
+    - name: Update openssh
+      dnf:
+        name:
+          - openssh
+          - openssh-askpass
+          - openssh-clients
+          - openssh-server
+        state: latest
+        update_only: true
+        enablerepo:
+          - security-common
     - block:
       - name: Update selected packages
         yum: