The latest openssh-server upgrade (openssh-server: 1:9.7p1-7, 1:9.8p1-2)
has not been followed by an apparmor update for its profile. When trying
to connect to the server, the connection was refused.

After investigating it was due to the /usr/lib/openssh/sshd-session
binary not allowed to be exectuted.

Journalctl gave:

sshd[5730]: fatal: rexec of /usr/lib/openssh/sshd-session failed: Permission denied
kernel: audit: type=1400 audit(1723284035.133:169): apparmor="DENIED" operation="exec" class="file" profile="/usr/sbin/sshd" name="/usr/lib/openssh/sshd-session" pid=5730 comm="sshd" requested_mask="x" denied_mask="x" fsuid=0 ouid=0

A local profile (/etc/apparmor.d/local/usr.sbin.sshd) with the
following lines fixes the problem:

    /usr/lib/openssh/sshd-session PUxr,
    /usr/lib/openssh/sshd-session-cleanup PUxr,

Note : these lines may not be optimal.