SUSE-SU-2025:4112-1

Опубликовано: 15 нояб. 2025

Источник: suse-cvrf

Описание

Security update for openssh

This update for openssh fixes the following issues:

CVE-2025-61984: Fixed code execution via control characters in usernames when a ProxyCommand is used (bsc#1251198)
CVE-2025-61985: Fixed code execution via '\0' character in ssh:// URI when a ProxyCommand is used (bsc#1251199)

Список пакетов

Container suse/manager/4.3/proxy-ssh:latest

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

Container suse/sle-micro-rancher/5.2:latest

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

Container suse/sle-micro-rancher/5.3:latest

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

Container suse/sle-micro-rancher/5.4:latest

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

Container suse/sle-micro/5.5:latest

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Enterprise Storage 7.1

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Micro 5.2

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Micro 5.3

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Micro 5.4

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Micro 5.5

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server 15 SP3-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server 15 SP4-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server 15 SP5-LTSS

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server for SAP Applications 15 SP3

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Linux Enterprise Server for SAP Applications 15 SP5

openssh-8.4p1-150300.3.57.1

openssh-askpass-gnome-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Manager Proxy LTS 4.3

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

SUSE Manager Server LTS 4.3

openssh-8.4p1-150300.3.57.1

openssh-clients-8.4p1-150300.3.57.1

openssh-common-8.4p1-150300.3.57.1

openssh-fips-8.4p1-150300.3.57.1

openssh-helpers-8.4p1-150300.3.57.1

openssh-server-8.4p1-150300.3.57.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-20254112-1/
Link for SUSE-SU-2025:4112-1
https://lists.suse.com/pipermail/sle-security-updates/2025-November/023293.html
E-Mail link for SUSE-SU-2025:4112-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1251198
SUSE Bug 1251198
https://bugzilla.suse.com/1251199
SUSE Bug 1251199
https://www.suse.com/security/cve/CVE-2025-61984/
SUSE CVE CVE-2025-61984 page
https://www.suse.com/security/cve/CVE-2025-61985/
SUSE CVE CVE-2025-61985 page

Описание

ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)

Затронутые продукты

Container suse/manager/4.3/proxy-ssh:latest:openssh-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-clients-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-common-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-fips-8.4p1-150300.3.57.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-61984.html
CVE-2025-61984
https://bugzilla.suse.com/1251198
SUSE Bug 1251198

Описание

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Затронутые продукты

Container suse/manager/4.3/proxy-ssh:latest:openssh-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-clients-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-common-8.4p1-150300.3.57.1

Container suse/manager/4.3/proxy-ssh:latest:openssh-fips-8.4p1-150300.3.57.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-61985.html
CVE-2025-61985
https://bugzilla.suse.com/1251199
SUSE Bug 1251199

SUSE-SU-2025:4112-1

Описание

Список пакетов

Container suse/manager/4.3/proxy-ssh:latest

Container suse/sle-micro-rancher/5.2:latest

Container suse/sle-micro-rancher/5.3:latest

Container suse/sle-micro-rancher/5.4:latest

Container suse/sle-micro/5.5:latest

SUSE Enterprise Storage 7.1

SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS

SUSE Linux Enterprise Micro 5.2

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Micro 5.5

SUSE Linux Enterprise Server 15 SP3-LTSS

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server 15 SP5-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP3

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Linux Enterprise Server for SAP Applications 15 SP5

SUSE Manager Proxy LTS 4.3

SUSE Manager Server LTS 4.3

Ссылки

Уязвимость: CVE-2025-61984

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-61985

Описание

Затронутые продукты

Ссылки