RHSA-2026:0693

csafDEsuse_csaf

security update for openssh

view advisory published 2026-01-15

security update for openssh

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2025-61985US——
ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.
CVE-2025-61984US—Exploit
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand…
02

references

External citations — patches, advisories, analysis.

03

remediations (12)

  • Fixedopenssh-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-askpass-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-askpass-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-clients-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-clients-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-keycat-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-keycat-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-server-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedopenssh-server-0:8.7p1-45.el9_6.1.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpam_ssh_agent_auth-0:0.10.4-5.45.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

  • Fixedpam_ssh_agent_auth-0:0.10.4-5.45.el9_6.x86_64 as component of SUSE Liberty Linux 9.6 EMS

    To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan