CVE-2025-32433: Major vulnerability in OTP's SSH server

[axelson]

There’s a fix out for this now. If you have an outdated system then I’d heartily recommend upgrading!

Updated Nerves systems available with CVE-2025-32433 (SSH) fix

Normally, we don’t announce patch release Nerves systems, but the nerves_system_br v1.30.1 release is particularly important for anyone using SSH to log into their Nerves devices. See CVE-2025-32433 and the many places on this forum and the Internet where this has been discussed and the exploit demoed. All official Nerves systems have been updated so if you are using one of them, updating your nerves_system_xyz to the latest will bring in Erlang/OTP 27.3.3 which has the fix. If it has been a w…