RC RANDOM CHAOS

OpenSSH

2 posts

Long Passwords Bypass Alpine SSH Authentication
Article

Long Passwords Bypass Alpine SSH Authentication

OpenSSH 10.6p2 fixes a critical password authentication bypass affecting Alpine Linux and other potentially vulnerable musl systems.

 Long passwords unlock disabled accounts
Article

Long passwords unlock disabled accounts

The "*sshole" flaw lets oversized passwords log into *-disabled accounts on musl-based OpenSSH servers like Alpine under certain configurations. Fixed in 10.6p2.