shield Security update for openssh

SUSE-SLE-Micro-5.4-2025-4112

This update for openssh fixes the following issues: - CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198) - CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)

• Release Date
  Nov 15 2025
• References
  Bugzilla: 1251198, 1251199
  CVEs: CVE-2025-61985, CVE-2025-61984
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro 5.4 aarch64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.57.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.57.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.57.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.57.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.57.1 lock rpm

SUSE Linux Enterprise Micro 5.4 s390x

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.57.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.57.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.57.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.57.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.57.1 lock rpm

SUSE Linux Enterprise Micro 5.4 x86_64

• Packages
  openssh
  Secure Shell Client and Server (Remote Login Program)

  8.4p1-150300.3.57.1 lock rpm lock src

  openssh-clients
  SSH (Secure Shell) client applications

  8.4p1-150300.3.57.1 lock rpm

  openssh-common
  SSH (Secure Shell) common files

  8.4p1-150300.3.57.1 lock rpm

  openssh-fips
  OpenSSH FIPS crypto module HMACs

  8.4p1-150300.3.57.1 lock rpm

  openssh-server
  SSH (Secure Shell) server

  8.4p1-150300.3.57.1 lock rpm