Lifecycle Timeline
1DescriptionNVD
Alpine Linux: openssh fixed in 10.1_p1-r0
AnalysisAI
OpenSSH on Alpine Linux received a security fix in package version 10.1_p1-r0, addressing an unspecified vulnerability tracked as CVE-2025-61984. The exact nature, attack vector, and impact of this vulnerability are not disclosed in available intelligence sources - no CVE description, CVSS score, or CWE classification has been published at time of analysis. EPSS probability is extremely low at 0.01% (2nd percentile), and no public exploit or CISA KEV listing has been identified.
Technical ContextAI
OpenSSH is the de facto standard implementation of the Secure Shell (SSH) protocol, widely deployed for remote administration and encrypted file transfer. Alpine Linux packages OpenSSH using its own versioning scheme; the fix version 10.1_p1-r0 corresponds to upstream OpenSSH 10.1p1 packaged for Alpine. Without a published CWE or CVE description, the root cause class - whether memory corruption, authentication bypass, privilege escalation, or another category - cannot be determined from available data. The vulnerability is reported exclusively by the Alpine Linux vendor through its own advisory channel.
Affected ProductsAI
OpenSSH as packaged for Alpine Linux is affected. The fix was introduced in Alpine package version 10.1_p1-r0, meaning all prior Alpine Linux packages of OpenSSH below this version are potentially vulnerable. No CPE strings, specific Alpine release branches (e.g., Alpine 3.x edge), or additional affected platform details were provided in the available intelligence. Affected version ranges across Alpine release streams (stable, edge) are not confirmed from available data - consult the Alpine Linux security advisory at https://security.alpinelinux.org/ for precise branch-level scope.
RemediationAI
Upgrade the OpenSSH package on Alpine Linux to version 10.1_p1-r0 or later using the Alpine package manager: 'apk update && apk upgrade openssh'. This is the vendor-confirmed fix version per the Alpine Linux security report. No workarounds or compensating controls are documented in available data, as no technical details about the vulnerability mechanism have been disclosed. If immediate patching is operationally not feasible, consider restricting SSH access at the network perimeter (firewall rules limiting source IPs to known management hosts) as a generic precaution - note this does not remediate the underlying vulnerability. Consult https://security.alpinelinux.org/ for the official advisory and any additional guidance.
Share
External POC / Exploit Code
Leaving vuln.today