openSUSE-SU-2025:20122-1
See a problem?- Import Source
- https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2025:20122-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/openSUSE-SU-2025:20122-1
- Upstream
- Related
- Published
- 2025-11-28T07:46:24Z
- Modified
- 2026-03-23T04:54:17Z
- Summary
- Security update for openssh
- Details
-
This update for openssh fixes the following issues:
- CVE-2025-61984: code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198).
- CVE-2025-61985: code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199).
- References
Affected packages
openSUSE:Leap 16.0 / openssh
Package
- Name
- openssh
- Purl
- pkg:rpm/opensuse/openssh&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed10.0p2-160000.3.1
Ecosystem specific
{
"binaries": [
{
"openssh": "10.0p2-160000.3.1",
"openssh-askpass-gnome": "10.0p2-160000.3.1",
"openssh-cavs": "10.0p2-160000.3.1",
"openssh-clients": "10.0p2-160000.3.1",
"openssh-common": "10.0p2-160000.3.1",
"openssh-helpers": "10.0p2-160000.3.1",
"openssh-server": "10.0p2-160000.3.1",
"openssh-server-config-rootlogin": "10.0p2-160000.3.1"
}
]
}
openSUSE:Leap 16.0 / openssh-askpass-gnome
Package
- Name
- openssh-askpass-gnome
- Purl
- pkg:rpm/opensuse/openssh-askpass-gnome&distro=openSUSE%20Leap%2016.0
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed10.0p2-160000.3.1
Ecosystem specific
{
"binaries": [
{
"openssh": "10.0p2-160000.3.1",
"openssh-askpass-gnome": "10.0p2-160000.3.1",
"openssh-cavs": "10.0p2-160000.3.1",
"openssh-clients": "10.0p2-160000.3.1",
"openssh-common": "10.0p2-160000.3.1",
"openssh-helpers": "10.0p2-160000.3.1",
"openssh-server": "10.0p2-160000.3.1",
"openssh-server-config-rootlogin": "10.0p2-160000.3.1"
}
]
}