RLSA-2025:23480

Synopsis

Moderate: openssh security update

Description

OpenSSH is an SSH protocol implementation supported by a number of Linux, UNIX, and similar operating systems. It includes the core files necessary for both the OpenSSH client and server.

Security Fix(es):

* openssh: OpenSSH: Control characters in usernames can lead to code execution via ProxyCommand (CVE-2025-61984)

* openssh: OpenSSH: Null character in ssh:// URI can lead to code execution via ProxyCommand (CVE-2025-61985)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Affected products

Rocky Linux 9 aarch64 Rocky Linux 9 ppc64le Rocky Linux 9 s390x Rocky Linux 9 x86_64

Fixes

2401960 2401962

CVEs

CVE-2025-61984 CVE-2025-61985

Affected packages

Rocky Linux 9 aarch64 - BaseOS

openssh-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-0:8.7p1-47.el9_7.rocky.0.1.src.rpm openssh-clients-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-clients-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-debugsource-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-keycat-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-keycat-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-server-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-server-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm

Rocky Linux 9 ppc64le - BaseOS

openssh-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-0:8.7p1-47.el9_7.rocky.0.1.src.rpm openssh-clients-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-clients-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-debugsource-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-keycat-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-keycat-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-server-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-server-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm

Rocky Linux 9 s390x - BaseOS

openssh-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-0:8.7p1-47.el9_7.rocky.0.1.src.rpm openssh-clients-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-clients-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-debugsource-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-keycat-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-keycat-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-server-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-server-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm

Rocky Linux 9 x86_64 - BaseOS

openssh-0:8.7p1-47.el9_7.rocky.0.1.src.rpm openssh-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-clients-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-clients-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-debugsource-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-keycat-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-keycat-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-server-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-server-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm

Rocky Linux 9 aarch64 - AppStream

openssh-askpass-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm openssh-askpass-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.aarch64.rpm pam_ssh_agent_auth-0:0.10.4-5.47.el9_7.rocky.0.1.aarch64.rpm pam_ssh_agent_auth-debuginfo-0:0.10.4-5.47.el9_7.rocky.0.1.aarch64.rpm

Rocky Linux 9 ppc64le - AppStream

openssh-askpass-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm openssh-askpass-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.ppc64le.rpm pam_ssh_agent_auth-0:0.10.4-5.47.el9_7.rocky.0.1.ppc64le.rpm pam_ssh_agent_auth-debuginfo-0:0.10.4-5.47.el9_7.rocky.0.1.ppc64le.rpm

Rocky Linux 9 s390x - AppStream

openssh-askpass-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm openssh-askpass-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.s390x.rpm pam_ssh_agent_auth-0:0.10.4-5.47.el9_7.rocky.0.1.s390x.rpm pam_ssh_agent_auth-debuginfo-0:0.10.4-5.47.el9_7.rocky.0.1.s390x.rpm

Rocky Linux 9 x86_64 - AppStream

openssh-askpass-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm openssh-askpass-debuginfo-0:8.7p1-47.el9_7.rocky.0.1.x86_64.rpm pam_ssh_agent_auth-0:0.10.4-5.47.el9_7.rocky.0.1.x86_64.rpm pam_ssh_agent_auth-debuginfo-0:0.10.4-5.47.el9_7.rocky.0.1.x86_64.rpm