p PatchFirst

SUSE-SU-2025:4067-1

SUSE-SU-2025:4067-1 · Security update for openssh

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)

Fix available

Published
Updated

Stack: system · network

Affected products and versions

  • openssh SUSE:Linux Enterprise Module for Basesystem 15 SP6

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

  • openssh SUSE:Linux Enterprise Module for Basesystem 15 SP7

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

  • openssh-askpass-gnome SUSE:Linux Enterprise Module for Desktop Applications 15 SP6

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

  • openssh-askpass-gnome SUSE:Linux Enterprise Module for Desktop Applications 15 SP7

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

  • openssh openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

  • openssh-askpass-gnome openSUSE:Leap 15.6

    Affected ranges
    • ECOSYSTEM: < 9.6p1-150600.6.34.1

    Update to 9.6p1-150600.6.34.1

Original sources

Check your server →