Back Linuxsecurity

openSUSE: OpenSSH Moderate Code Exec Issues CVE-2025-61984 CVE-2025

Linuxsecurity •LinuxSecurity Advisories • November 12, 2025

This update for openssh fixes the following issues: * CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) * CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)

## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.6 zypper in -t patch SUSE-2025-4067=1 openSUSE-SLE-15.6-2025-4067=1 * Basesystem Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2025-4067=1 * Basesystem Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP7-2025-4067=1 * Desktop Applications Module 15-SP6 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP6-2025-4067=1 * Desktop Applications Module 15-SP7 zypper in -t patch SUSE-SLE-Module-Desktop-Applications-15-SP7-2025-4067=1

* openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586) * openssh-common-9.6p1-150600.6.34.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.34.1 * openssh-server-debuginfo-9.6p1-150600.6.34.1 * openssh-debugsource-9.6p1-150600.6.34.1 * openssh-cavs-debuginfo-9.6p1-150600.6.34.1 * openssh-clients-debuginfo-9.6p1-150600.6.34.1 * openssh-server-9.6p1-150600.6.34.1 * openssh-common-debuginfo-9.6p1-150600.6.34.1 * openssh-debuginfo-9.6p1-150600.6.34.1 * openssh-9.6p1-150600.6.34.1 * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.34.1 * openssh-helpers-debuginfo-9.6p1-150600.6.34.1 * openssh-clients-9.6p1-150600.6.34.1 * openssh-cavs-9.6p1-150600.6.34.1 * openssh-askpass-gnome-9.6p1-150600.6.34.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.34.1 * openssh-helpers-9.6p1-150600.6.34.1 * openssh-fips-9.6p1-150600.6.34.1 * Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-common-9.6p1-150600.6.34.1 * openssh-server-debuginfo-9.6p1-150600.6.34.1 * openssh-debugsource-9.6p1-150600.6.34.1 * openssh-clients-debuginfo-9.6p1-150600.6.34.1 * openssh-server-9.6p1-150600.6.34.1 * openssh-common-debuginfo-9.6p1-150600.6.34.1 * openssh-debuginfo-9.6p1-150600.6.34.1 * openssh-9.6p1-150600.6.34.1 * openssh-helpers-debuginfo-9.6p1-150600.6.34.1 * openssh-clients-9.6p1-150600.6.34.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.34.1 * openssh-helpers-9.6p1-150600.6.34.1 * openssh-fips-9.6p1-150600.6.34.1 * Basesystem Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-common-9.6p1-150600.6.34.1 * openssh-server-debuginfo-9.6p1-150600.6.34.1 * openssh-debugsource-9.6p1-150600.6.34.1 * openssh-clients-debuginfo-9.6p1-150600.6.34.1 * openssh-server-9.6p1-150600.6.34.1 * openssh-common-debuginfo-9.6p1-150600.6.34.1 * openssh-debuginfo-9.6p1-150600.6.34.1 * openssh-9.6p1-150600.6.34.1 * openssh-helpers-debuginfo-9.6p1-150600.6.34.1 * openssh-clients-9.6p1-150600.6.34.1 * openssh-server-config-disallow-rootlogin-9.6p1-150600.6.34.1 * openssh-helpers-9.6p1-150600.6.34.1 * openssh-fips-9.6p1-150600.6.34.1 * Desktop Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.34.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.34.1 * openssh-askpass-gnome-9.6p1-150600.6.34.1 * Desktop Applications Module 15-SP7 (aarch64 ppc64le s390x x86_64) * openssh-askpass-gnome-debuginfo-9.6p1-150600.6.34.1 * openssh-askpass-gnome-debugsource-9.6p1-150600.6.34.1 * openssh-askpass-gnome-9.6p1-150600.6.34.1

* bsc#1251198 * bsc#1251199 ## References: * * * *

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

SUSE Releases Security Fix for OpenSSH Code Execution Vulnerabilities SUSE has issued an update for OpenSSH addressing two moderate code execution vulnerabilities, CVE-2025-61984 and CVE-2025-61985. These vulnerabilities could allow code execution through control characters in usernames and null characters in ssh:// URIs when using a ProxyCommand. Affected users are advised to apply the patch using SUSE's recommended installation methods. 2 sources 34

Extracted Entities

openSUSE: OpenSSH Moderate Code Exec Issues CVE-2025-61984 CVE-2025

The full story

Extracted Entities

Attack Types (1)

CVEs (2)

Platforms (1)