Combined OpenSSH and musl-libc flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password — emergency fixes issued for millions of systems, patch …
OpenSSH 10.6p2 fixes a critical password authentication bypass affecting certain Linux systems and includes several additional bug fixes.
LinuxiacEN
A newly disclosed OpenSSH vulnerability dubbed "*sshole" allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts that are configured to block password authentication …
Log in as root via SSH with any password longer than 256 bytes: the *sshole vulnerability hits OpenSSH on systems with musl libc.
In an announcement posted on social media, Damien Miller (djm@) writes, OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.
OpenSSH’s update brings broader post-quantum warnings, a new username restriction, and some thoughts on security reporting in the age of AI.
In their usual, unassuming fashion, the OpenSSH project have released a new version, release 10.6. The full text of the 10.6 release nodes reads: OpenSSH 10.6 was released on 2026-10-06.
Lieferkette
Ubuntu
