Red Hat Security Advisory: openssh security update

Fixed packages 20

Vulnerabilities 3

• Medium 6.5
  CVE-2023-51385 Public exploit EPSS 20%

  In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, an…

  openssh openssh openssh-ssh1 openssh Debian Ubuntu Azure Linux Alpine
  Dec 18, 2023
• Low 3.6
  CVE-2025-61984 Public exploit

  ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted source…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine
  Oct 6, 2025
• Low 3.6
  CVE-2025-61985

  ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a Pro…

  OpenBSD OpenSSH openssh openssh Debian Ubuntu Azure Linux Alpine
  Oct 6, 2025

References

• article
  https://access.redhat.com/security/updates/classification/#moderate
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2255271
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401960
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2401962
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_1790.json
• report
  https://access.redhat.com/security/cve/CVE-2023-51385
• advisory
  https://www.cve.org/CVERecord?id=CVE-2023-51385
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2023-51385
• report
  https://access.redhat.com/security/cve/CVE-2025-61984
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-61984
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-61984
• article
  https://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2
• article
  https://www.openssh.com/releasenotes.html#10.1p1
• article
  https://www.openwall.com/lists/oss-security/2025/10/06/1
• report
  https://access.redhat.com/security/cve/CVE-2025-61985
• advisory
  https://www.cve.org/CVERecord?id=CVE-2025-61985
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2025-61985