https://thehackernews.com/2026/11/openssh-issues-emergency-fix-for-flaw.html #linux #security #cve

The Hacker NewsOpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxOpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using long passwords.
"musl's crypt() refuses passwords longer than 256 bytes and returns * to signal the error. That * matches the stored *, so sshd accepts the login." 🤦
omg! i couldn't believe it until i read this https://www.openssh.org/releasenotes.html#10.6p2
openssh.orgOpenSSH: Release NotesOpenSSH release notes





