Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
Assessment
Vulnerability Intelligence
Exploits
Alerts
Datasets
MCP
White Label
Security Automation SDK
MCP for AI Agents
Plans & Pricing
API Reference
Settings
Sign in

Moderate: openssh security update

🗓️ 17 Dec 2025 00:00:00Reported by AlmaLinuxType 
almalinux
 almalinux🔗 errata.almalinux.org👁 43 Views

OpenSSH update fixes code execution via ProxyCommand from control characters in usernames and URI.

Related
Packages
Refs
ReporterTitlePublishedViews
Family
ibm
IBM Security Bulletins		Security Bulletin: IBM i is Affected by Improper Handling of Special Elements and Improper Neutralization of Null Byte Vulnerabilities in OpenSSH [CVE-2025-61984, CVE-2025-61985]
18 May 202620:52
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in openssh library (CVE-2025-61984, CVE-2025-61985) affect Power HMC.
31 Mar 202615:30
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified with the DS8900F and DS8A00 Hardware Management Console (HMC)
21 Aug 202601:32
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in OpenSSH affects IBM Netezza Appliance
15 Apr 202610:29
–ibm
ibm
IBM Security Bulletins		Security Bulletin: AIX/VIOS is vulnerable to potential code execution (CVE-2025-61984, CVE-2025-61985) due to OpenSSH
6 Jan 202621:08
–ibm
ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities affect IBM Cloud Pak System
7 Oct 202618:56
–ibm
githubexploit
GithubExploit		Exploit for CVE-2025-61984
13 Oct 202501:42
–githubexploit
githubexploit
GithubExploit		Exploit for CVE-2025-61984
7 Oct 202503:17
–githubexploit
nessus
Tenable Nessus		Amazon Linux 2023 : openssh, openssh-clients, openssh-keycat (ALAS2023-2026-1441)
19 Feb 202600:00
–nessus
nessus
Tenable Nessus		Amazon Linux 2 : openssh, --advisory ALAS2-2026-3175 (ALAS-2026-3175)
19 Feb 202600:00
–nessus
Rows per page
OSOS VersionArchitecturePackagePackage VersionFilename
almalinux8aarch64openssh-askpass8.0p1-27.el8_10openssh-askpass-8.0p1-27.el8_10.aarch64.rpm
almalinux8ppc64leopenssh-askpass8.0p1-27.el8_10openssh-askpass-8.0p1-27.el8_10.ppc64le.rpm
almalinux8s390xopenssh-askpass8.0p1-27.el8_10openssh-askpass-8.0p1-27.el8_10.s390x.rpm
almalinux8x86_64openssh-askpass8.0p1-27.el8_10openssh-askpass-8.0p1-27.el8_10.x86_64.rpm
almalinux8aarch64openssh-ldap8.0p1-27.el8_10openssh-ldap-8.0p1-27.el8_10.aarch64.rpm
almalinux8aarch64openssh8.0p1-27.el8_10openssh-8.0p1-27.el8_10.aarch64.rpm
almalinux8aarch64openssh-keycat8.0p1-27.el8_10openssh-keycat-8.0p1-27.el8_10.aarch64.rpm
almalinux8aarch64openssh-cavs8.0p1-27.el8_10openssh-cavs-8.0p1-27.el8_10.aarch64.rpm
almalinux8aarch64openssh-clients8.0p1-27.el8_10openssh-clients-8.0p1-27.el8_10.aarch64.rpm
almalinux8aarch64pam_ssh_agent_auth0.10.3-7.27.el8_10pam_ssh_agent_auth-0.10.3-7.27.el8_10.aarch64.rpm
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a demo
21 Dec 2025 20:00Current
6.7Medium risk
Vulners AI Score6.7
CVSS 3.13.6
EPSS0.00463
SSVC
opensshcode executionproxycommandcontrol charactersusernamesssh address
43