Release Info

Advisory: CLSA-2026:1767627264

OS: CentOS 8.5 ELS

Public date: 2026-01-05 15:34:27.035481

Project: openssh

Version: 8.0p1-10.el8.tuxcare.els8

Errata link: https://errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1767627264.html

Changelog

- CVE-2025-61985: potential code execution using the ‘\0’ character in an ssh:// URI, when a ProxyCommand is used

Update

Update command: dnf update openssh*

Packages list

openssh-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-askpass-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-cavs-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-clients-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-keycat-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-ldap-8.0p1-10.el8.tuxcare.els8.x86_64.rpm openssh-server-8.0p1-10.el8.tuxcare.els8.x86_64.rpm pam_ssh_agent_auth-0.10.3-7.10.el8.tuxcare.els8.x86_64.rpm

CVEs

CVE-2025-61984
CVE-2025-61985