oss-security - Dropbear SSH 2025.88 fixes CVE-2025-47203

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <23c5cd0c-2a9b-4caa-a936-381210400cc2@oracle.com>
Date: Fri, 9 May 2025 09:15:37 -0700
From: Alan Coopersmith <alan.coopersmith@...cle.com>
To: oss-security@...ts.openwall.com
Subject: Dropbear SSH 2025.88 fixes CVE-2025-47203

https://lists.ucc.gu.uwa.edu.au/pipermail/dropbear/2025q2/002385.html
announces the release of Dropbear SSH 2025.88 including this fix:

> - Security: Don't allow dbclient hostname arguments to be interpreted
>   by the shell.
> 
>   dbclient hostname arguments with a comma (for multihop) would be
>   passed to the shell which could result in running arbitrary shell
>   commands locally. That could be a security issue in situations
>   where dbclient is passed untrusted hostname arguments.
> 
>   Now the multihop command is executed directly, no shell is involved.
>   Thanks to Marcin Nowak for the report, tracked as CVE-2025-47203

-- 
         -Alan Coopersmith-                 alan.coopersmith@...cle.com
          Oracle Solaris Engineering - https://blogs.oracle.com/solaris

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.