Posted by Rich Felker on Nov 09 I didn't see you'd also asked this on-list, so copying my answer here: This will possibly be changed (to always return null for failure) in the next release cycle anyway, but as a general principle we don't do behavioral build options. This was a very intentional choice from seeing how things went with uclibc and the combinatorics of build-time options that developers aren't familiar with when things break for users
Re: [musl] Re: [oss-security] "sshole": password authentication bypass: OpenSSH + musl libc
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/608
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.


