SUSE-SU-2025:4098-1
SUSE-SU-2025:4098-1 · Security update for openssh8.4
This page contains facts from public vulnerability sources. Check the original advisory before updating.
This update for openssh8.4 fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)
Fix available
- Published
- Updated
Stack: system
Affected products and versions
openssh8.4 SUSE:Linux Enterprise Server 12 SP5-LTSS
- Affected ranges
- ECOSYSTEM: < 8.4p1-8.19.1
Update to 8.4p1-8.19.1
openssh8.4 SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5
- Affected ranges
- ECOSYSTEM: < 8.4p1-8.19.1
Update to 8.4p1-8.19.1