RC RANDOM CHAOS

musl

1 post

Long passwords unlock disabled accounts
Article

Long passwords unlock disabled accounts

The "*sshole" flaw lets oversized passwords log into *-disabled accounts on musl-based OpenSSH servers like Alpine under certain configurations. Fixed in 10.6p2.