[ALSA-2025:23479] Moderate: openssh security update
Type:
security
Severity:
moderate
Release date:
2025-12-21
Description:
OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server. Security Fix(es): * openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984) * openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
References:
Updated packages listed below:
Architecture Package Checksum
aarch64 openssh-keycat-9.9p1-12.el10_1.alma.1.aarch64.rpm 0365c459c49a30caad848477348a823156acafd53388f32e0a919612012b2a72
aarch64 openssh-clients-9.9p1-12.el10_1.alma.1.aarch64.rpm 1a7ce40919d954def56a3c189df949392ceb83c489258e95cf2090a25b641613
aarch64 openssh-9.9p1-12.el10_1.alma.1.aarch64.rpm 2edb02fe546d074604911a48120914c260cbe792844a7f97bf510e1df6172473
aarch64 openssh-server-9.9p1-12.el10_1.alma.1.aarch64.rpm 574cc9b8b5bd6fb423b7251bad34d0edac2776a4c18b6e56036445b7a3842ff9
aarch64 openssh-keysign-9.9p1-12.el10_1.alma.1.aarch64.rpm cc3b6be0f344d5f9c023657d2e547b49f49492e2e90ffecdf8324a915d3ce406
aarch64 openssh-askpass-9.9p1-12.el10_1.alma.1.aarch64.rpm d63e9e30502660805a22254484f0c2c84ccbc5e0c4b898b5fe5afbaaa28831f8
ppc64le openssh-clients-9.9p1-12.el10_1.alma.1.ppc64le.rpm 1c5b52e0c772f13cf00b42012900838ace465308d0336f2466c0717f867aad55
ppc64le openssh-keysign-9.9p1-12.el10_1.alma.1.ppc64le.rpm 6b535750488042801ce94ad2f1ad699e32c226efb65b84c694826697d0763433
ppc64le openssh-askpass-9.9p1-12.el10_1.alma.1.ppc64le.rpm 73bf96110620bf2ccf62c0f957e606124f6cad50fff951ce7372b40eb97b9a51
ppc64le openssh-server-9.9p1-12.el10_1.alma.1.ppc64le.rpm 7ca3d1e6b4287fd40c81cab0ebd9156f4641b48944b049df4a7a2de70a2d462a
ppc64le openssh-keycat-9.9p1-12.el10_1.alma.1.ppc64le.rpm a30bb18a0a25977ceb6d789f65f90d8ac92e6965a8df747e6a4c322291f370bd
ppc64le openssh-9.9p1-12.el10_1.alma.1.ppc64le.rpm e004bc82584dea8f692dc42b11c6f2d6b6583e2932a033ece8331ec250eec1b3
s390x openssh-askpass-9.9p1-12.el10_1.alma.1.s390x.rpm 281ac8514e69243bbd4368245d3918008149a73dbfd3dda4b07f667992d16aa2
s390x openssh-9.9p1-12.el10_1.alma.1.s390x.rpm 6509661772ef346ae8a0aa41b316d3c7e0dd2c0bc6b101b4a89eb55ef90a0618
s390x openssh-server-9.9p1-12.el10_1.alma.1.s390x.rpm 8a3b04accbd05113c277b7ce30ddf9f66efe45df45b3f8b8b4dc01421161746b
s390x openssh-keysign-9.9p1-12.el10_1.alma.1.s390x.rpm 9e79f021269a40e96739dbe5a44934382cc81889d2fb1ccfaaaa4084a0c4989e
s390x openssh-clients-9.9p1-12.el10_1.alma.1.s390x.rpm a7c26f7bb023ce2d733b13bf8da95aa665a1d6d6e154d1857a94162ceea33e85
s390x openssh-keycat-9.9p1-12.el10_1.alma.1.s390x.rpm dbf923440ebd673d9c474e9ef308011eedfa641ee19e583f433b8f26393911cc
x86_64 openssh-askpass-9.9p1-12.el10_1.alma.1.x86_64.rpm 3ee2256fc24512d816cc800edc1c2f0a545dd2e9f7109f88c65948426587a21e
x86_64 openssh-9.9p1-12.el10_1.alma.1.x86_64.rpm 4e9cd657856b146ab7518155702bc314a5691fbb48cb55ee5e57906873cdd331
x86_64 openssh-keysign-9.9p1-12.el10_1.alma.1.x86_64.rpm 9f5ffab85253c2e26826a1142d716d6ad798e96dfc2a33868d1d6238b542a17b
x86_64 openssh-server-9.9p1-12.el10_1.alma.1.x86_64.rpm a43e36fb1e16002a89e9c046aff3223d96179440f9db76dde04efcec9f48c8c8
x86_64 openssh-clients-9.9p1-12.el10_1.alma.1.x86_64.rpm d4db339539f268a5ca7c08219a17e8a6236d381db7184222340361419b25a278
x86_64 openssh-keycat-9.9p1-12.el10_1.alma.1.x86_64.rpm f1cdbba302f3bc00fb16c8fca5d50222c43fac4fea52be43c27f6e103ba64c4b
x86_64_v2 openssh-keysign-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm 0a9eb1dbb0dbf64504fc514f04dc2ad05eff094d694f5d2aa6f6eaf1f5466d18
x86_64_v2 openssh-askpass-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm 31289147474b723bb87ef99027e03f1c5d77c1a76a5405d3ccc04800195ad918
x86_64_v2 openssh-server-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm 84a67991a78fa85fde22b29dc34baba63b885a14364c7f2262bd514834524090
x86_64_v2 openssh-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm 996572dae1aa1a3e114e9f97691319620e06aa9426f74a3fb4759a54b478b8e6
x86_64_v2 openssh-clients-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm c53b58a29df2e3a1d1ed1e12f082251f7ff6495873a8e641beb20d91f2264055
x86_64_v2 openssh-keycat-9.9p1-12.el10_1.alma.1.x86_64_v2.rpm fa0b62382b3e5957c40f38c67a3ea88aa55c4ff82e3db48b6819b9d5c029f6ad
Notes:
This page is generated automatically from Red Hat security data and has not been checked for errors. For clarification or corrections please contact the AlmaLinux Packaging Team.