Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-61985

Fixed in a distro release EPSS <1%CVSS 3.6

ssh in OpenSSH before 10.1 allows the '\0' character in an ssh:// URI, potentially leading to code execution when a ProxyCommand is used.

Published 2025-10-06 · CVE record · OSV

Products: openbsd openssh, Siemens SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, Siemens SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP, Siemens SIPLUS S7-1500 CPU 1518-4 PN/DP MFP

Distro releases

ReleasePackageFixed in
AlmaLinux 10openssh9.9p1-12.el10_1.alma.1
AlmaLinux 10openssh-askpass9.9p1-12.el10_1.alma.1
AlmaLinux 10openssh-clients9.9p1-12.el10_1.alma.1
AlmaLinux 10openssh-keycat9.9p1-12.el10_1.alma.1
AlmaLinux 10openssh-keysign9.9p1-12.el10_1.alma.1
AlmaLinux 10openssh-server9.9p1-12.el10_1.alma.1
AlmaLinux 8openssh8.0p1-27.el8_10
AlmaLinux 8openssh-askpass8.0p1-27.el8_10
AlmaLinux 8openssh-cavs8.0p1-27.el8_10
AlmaLinux 8openssh-clients8.0p1-27.el8_10
AlmaLinux 8openssh-keycat8.0p1-27.el8_10
AlmaLinux 8openssh-ldap8.0p1-27.el8_10
AlmaLinux 8openssh-server8.0p1-27.el8_10
AlmaLinux 8pam_ssh_agent_auth0.10.3-7.27.el8_10
AlmaLinux 9openssh8.7p1-47.el9_7.alma.1
AlmaLinux 9openssh-askpass8.7p1-47.el9_7.alma.1
AlmaLinux 9openssh-clients8.7p1-47.el9_7.alma.1
AlmaLinux 9openssh-keycat8.7p1-47.el9_7.alma.1
AlmaLinux 9openssh-server8.7p1-47.el9_7.alma.1
AlmaLinux 9pam_ssh_agent_auth0.10.4-5.47.el9_7.alma.1
Alpine 3.22openssh10.0_p1-r10
Alpine 3.23openssh10.1_p1-r0
Alpine 3.24openssh10.1_p1-r0
Amazon Linux 2023openssh8.7p1-8.amzn2023.0.16
Amazon Linux 2023openssh-clients8.7p1-8.amzn2023.0.16
Amazon Linux 2023openssh-keycat8.7p1-8.amzn2023.0.16
Amazon Linux 2023openssh-server8.7p1-8.amzn2023.0.16
Amazon Linux 2023pam_ssh_agent_auth0.10.4-4.8.amzn2023.0.16
Debian 12openssh1:9.2p1-2+deb12u8
Debian 13openssh1:10.0p1-7+deb13u1
Debian 14openssh1:10.1p1-1
Red Hat Enterprise Linux 10.1openssh0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-askpass0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-askpass-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-clients0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-clients-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-debugsource0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-keycat0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-keycat-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-keysign0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-keysign-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-server0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-server-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 10.1openssh-sk-dummy-debuginfo0:9.9p1-12.el10_1
Red Hat Enterprise Linux 8openssh0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-askpass0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-askpass-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-cavs0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-cavs-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-clients0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-clients-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-debugsource0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-keycat0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-keycat-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-ldap0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-ldap-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-server0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8openssh-server-debuginfo0:8.0p1-27.el8_10
Red Hat Enterprise Linux 8pam_ssh_agent_auth0:0.10.3-7.27.el8_10
Red Hat Enterprise Linux 8pam_ssh_agent_auth-debuginfo0:0.10.3-7.27.el8_10
Red Hat Enterprise Linux 9openssh0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-askpass0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-askpass-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-clients0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-clients-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-debugsource0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-keycat0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-keycat-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-server0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-server-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9openssh-sk-dummy-debuginfo0:8.7p1-47.el9_7
Red Hat Enterprise Linux 9pam_ssh_agent_auth0:0.10.4-5.47.el9_7
Red Hat Enterprise Linux 9pam_ssh_agent_auth-debuginfo0:0.10.4-5.47.el9_7
Red Hat Enterprise Linux eus 10.0openssh0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-askpass0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-askpass-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-clients0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-clients-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-debugsource0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-keycat0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-keycat-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-keysign0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-keysign-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-server0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-server-debuginfo0:9.9p1-7.el10_0.1
Red Hat Enterprise Linux eus 10.0openssh-sk-dummy-debuginfo0:9.9p1-7.el10_0.1
Red Hat hummingbird 1openssh0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-askpass0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-clients0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-keycat0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-keysign0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-server0:10.2p1-9.hum1
Red Hat hummingbird 1openssh-sk-dummy0:10.2p1-9.hum1
Red Hat rhel e4s 9.0openssh0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-askpass0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-askpass-debuginfo0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-clients0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-clients-debuginfo0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-debuginfo0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-debugsource0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-keycat0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-keycat-debuginfo0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-server0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0openssh-server-debuginfo0:8.7p1-13.el9_0.1
Red Hat rhel e4s 9.0pam_ssh_agent_auth0:0.10.4-4.13.el9_0.4
Red Hat rhel e4s 9.0pam_ssh_agent_auth-debuginfo0:0.10.4-4.13.el9_0.4
Red Hat rhel e4s 9.2openssh0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-askpass0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-askpass-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-clients0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-clients-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-debugsource0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-keycat0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-keycat-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-server0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-server-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2openssh-sk-dummy-debuginfo0:8.7p1-30.el9_2.9
Red Hat rhel e4s 9.2pam_ssh_agent_auth0:0.10.4-5.30.el9_2.9
Red Hat rhel e4s 9.2pam_ssh_agent_auth-debuginfo0:0.10.4-5.30.el9_2.9
Red Hat rhel eus 9.4openssh0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-askpass0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-askpass-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-clients0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-clients-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-debugsource0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-keycat0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-keycat-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-server0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-server-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4openssh-sk-dummy-debuginfo0:8.7p1-38.el9_4.6
Red Hat rhel eus 9.4pam_ssh_agent_auth0:0.10.4-5.38.el9_4.6
Red Hat rhel eus 9.4pam_ssh_agent_auth-debuginfo0:0.10.4-5.38.el9_4.6
Red Hat rhel eus 9.6openssh0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-askpass0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-askpass-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-clients0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-clients-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-debugsource0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-keycat0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-keycat-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-server0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-server-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6openssh-sk-dummy-debuginfo0:8.7p1-45.el9_6.1
Red Hat rhel eus 9.6pam_ssh_agent_auth0:0.10.4-5.45.el9_6
Red Hat rhel eus 9.6pam_ssh_agent_auth-debuginfo0:0.10.4-5.45.el9_6
Rocky Linux 10openssh0:9.9p1-12.el10_1.rocky.0.1
Rocky Linux 8openssh0:8.0p1-27.el8_10
Rocky Linux 9openssh0:8.7p1-47.el9_7.rocky.0.1
SUSE Enterprise Storage 7.1openssh8.4p1-150300.3.57.1
SUSE Enterprise Storage 7.1openssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP4-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise High Performance Computing 15 SP5-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Micro 5.2openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Micro 5.3openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Micro 5.4openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Micro 5.5openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Module for Basesystem 15 SP6openssh9.6p1-150600.6.34.1
SUSE Linux Enterprise Module for Basesystem 15 SP7openssh9.6p1-150600.6.34.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP6openssh-askpass-gnome9.6p1-150600.6.34.1
SUSE Linux Enterprise Module for Desktop Applications 15 SP7openssh-askpass-gnome9.6p1-150600.6.34.1
SUSE Linux Enterprise Server 12 SP5-LTSSopenssh8.48.4p1-8.19.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 15 SP3-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 15 SP4-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 15 SP4-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 15 SP5-LTSSopenssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 15 SP5-LTSSopenssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server 16.0openssh10.0p2-160000.3.1
SUSE Linux Enterprise Server 16.0openssh-askpass-gnome10.0p2-160000.3.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5openssh8.48.4p1-8.19.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3openssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP4openssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5openssh8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP Applications 15 SP5openssh-askpass-gnome8.4p1-150300.3.57.1
SUSE Linux Enterprise Server for SAP applications 16.0openssh10.0p2-160000.3.1
SUSE Linux Enterprise Server for SAP applications 16.0openssh-askpass-gnome10.0p2-160000.3.1
SUSE Linux Micro 6.0openssh9.6p1-4.1
SUSE Linux Micro 6.1openssh9.6p1-slfo.1.1_3.1
SUSE Linux Micro 6.2openssh10.0p2-160000.3.1
SUSE Manager Proxy LTS 4.3openssh8.4p1-150300.3.57.1
SUSE Manager Server LTS 4.3openssh8.4p1-150300.3.57.1
Ubuntu 18.04 LTSopenssh-ssh1no fix
Ubuntu 20.04 LTSopenssh-ssh1no fix
Ubuntu 22.04 LTSopenssh1:8.9p1-3ubuntu0.14
Ubuntu 22.04 LTSopenssh-ssh1no fix
Ubuntu 24.04 LTSopenssh1:9.6p1-3ubuntu13.15
Ubuntu 24.04 LTSopenssh-ssh1no fix
Ubuntu 25.10openssh1:10.0p1-5ubuntu5.1
Ubuntu 25.10openssh-ssh1no fix
Ubuntu 26.04 LTSopenssh1:10.2p1-2ubuntu1
Ubuntu 26.04 LTSopenssh-ssh1no fix
Ubuntu 26.10openssh-ssh1no fix
Ubuntu Pro 20.04 LTSopenssh1:8.2p1-4ubuntu0.13+esm1
Ubuntu Pro FIPS-preview 22.04 LTSopensshno fix
Ubuntu Pro FIPS-updates 16.04 LTSopensshno fix
Ubuntu Pro FIPS-updates 18.04 LTSopensshno fix
Ubuntu Pro FIPS-updates 20.04 LTSopenssh1:8.2p1-4ubuntu0.fips.0.13.1
Ubuntu Pro FIPS-updates 22.04 LTSopenssh1:8.9p1-3ubuntu0.14+Fips1
Ubuntu Pro FIPS-updates 24.04 LTSopenssh1:9.6p1-3ubuntu13.15+Fips1
Ubuntu Pro FIPS 16.04 LTSopensshno fix
Ubuntu Pro FIPS 18.04 LTSopensshno fix
Ubuntu Pro FIPS 20.04 LTSopensshno fix
openSUSE Leap 15.6openssh9.6p1-150600.6.34.1
openSUSE Leap 15.6openssh-askpass-gnome9.6p1-150600.6.34.1
openSUSE Leap 16.0openssh10.0p2-160000.3.1
openSUSE Leap 16.0openssh-askpass-gnome10.0p2-160000.3.1