Tagged: OpenSSH
1 post · browse all tags
-
sshole: The OpenSSH Password Bypass, and Why Debian Is Not in Scope
OpenSSH 10.6p2 fixes a bug where a 257-byte password logs you in to an account with no password. It hits musl systems such as Alpine, not Debian. How it works, the Ansible check I ran on four Debian hosts, and the fix if you run Alpine.