Early Access — Mondoo Vulnerability Intelligence is currently in preview.

RHSA-2025:23480

MEDIUM5.3

Red Hat Security Advisory: openssh security update

Published Dec 18, 2025

Modified 3 weeks ago

Fix available

Affected Packages

Red Hat:enterprise_linux:9::appstreamopenssh

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-askpass

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-askpass-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-clients

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-clients-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-debugsource

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-keycat

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-keycat-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-server

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-server-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreamopenssh-sk-dummy-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::appstreampam_ssh_agent_auth

Fixed in:

0:0.10.4-5.47.el9_7

Red Hat:enterprise_linux:9::appstreampam_ssh_agent_auth-debuginfo

Fixed in:

0:0.10.4-5.47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-askpass

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-askpass-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-clients

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-clients-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-debugsource

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-keycat

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-keycat-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-server

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-server-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseosopenssh-sk-dummy-debuginfo

Fixed in:

0:8.7p1-47.el9_7

Red Hat:enterprise_linux:9::baseospam_ssh_agent_auth

Fixed in:

0:0.10.4-5.47.el9_7

Red Hat:enterprise_linux:9::baseospam_ssh_agent_auth-debuginfo

Fixed in:

0:0.10.4-5.47.el9_7

References

ADVISORYhttps://access.redhat.com/errata/RHSA-2025:23480 REPORThttps://access.redhat.com/security/cve/CVE-2025-61984 REPORThttps://access.redhat.com/security/cve/CVE-2025-61985 ARTICLEhttps://access.redhat.com/security/updates/classification/#moderate REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2401960 REPORThttps://bugzilla.redhat.com/show_bug.cgi?id=2401962 ARTICLEhttps://marc.info/?l=openssh-unix-dev&m=175974522032149&w=2 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-61984 ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2025-61985 ADVISORYhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23480.json ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-61984 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2025-61985 ARTICLEhttps://www.openssh.com/releasenotes.html#10.1p1 ARTICLEhttps://www.openwall.com/lists/oss-security/2025/10/06/1

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

LocalAV:L

Attack Complexity

LowAC:L

Privileges Required

LowPR:L

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

LowI:L

Availability

LowA:L

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Upstream

CVE-2025-61984 CVE-2025-61985

Ecosystems

Red Hat enterprise_linux 9 appstream Red Hat enterprise_linux 9 baseos

Timeline

PublishedDec 18, 2025

ModifiedDec 18, 2025

RHSA-2025:23480 | Mondoo Vulnerability Intelligence