OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass
Teaser from the source
On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters. The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek .
This is the RSS-feed teaser. Read the full article at the original source.
Read at SecurityWeekMore on OpenSSH
Other advisories
- HighCVE-2026-123158OpenSSH: Schwachstelle ermöglicht Erlangen von Administratorrechten
- HighCVE-2026-123158OpenBSD OpenSSH: Umgehung der Authentifizierung
- HighCVE-2026-123158OpenSSH Security Restriction Bypass Vulnerability
- HighCVE-2026-123158OpenBSD OpenSSH: Umgehung der Authentifizierung
- MediumCVE-2026-106587OpenSSH: Mehrere Schwachstellen
- Not ratedosv:OESA-2026-4692openssh security update
- Not ratedosv:OESA-2026-4691openssh security update
- Not ratedosv:OESA-2026-4690openssh security update
Other news entries
- Hackers Target OpenSSH SSHole Flaw Within Hours of Disclosure, Gain Root on HoneypotNewsThe Hacker News
- Fehler bei Passwortprüfung: Angreifer können über OpenSSH Linux-Konten kapernNewsGolem.de — Security
- OpenSSH: Schwachstelle ermöglicht Erlangen von AdministratorrechtenVulnerabilityBSI CERT-Bund
- NCSC-2026-0469 [1.00] [M/H] Kwetsbaarheid verholpen in OpenSSH door OpenSSH ProjectNewsNCSC-NL
- OpenSSH flaw lets attackers access password-disabled accounts on some Linux systemsNewsCSO Online
- Get root on a musl Linux system by slamming it with an overly long passwordNewsThe Register — Security
- OpenSSH flaw lets attackers log into password-disabled Linux accountsNewsBleepingComputer
- OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine LinuxNewsThe Hacker News
Source: https://www.securityweek.com/openssh-rushes-patches-for-sshole-authentication-bypass/
ID