Posted by Michael Orlitzky on Nov 06 It was easy to lose in the noise, but musl is not the only one doing this: https://github.com/besser82/libxcrypt/blob/develop/configure.ac#L322
Re: "sshole": password authentication bypass: OpenSSH + musl libc
About this summary. This is a short excerpt from the description that oss-security published with its article. Cyber Security News did not report or verify the underlying story. Read the original: https://seclists.org/oss-sec/2026/q4/567
Source attribution: headline and facts are from oss-security (seclists.org). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Coding Agents Copy Your Secrets to a Hidden File. Thousands Are on GitHub
Shmulik Cohen and Matan Giladi write: Apiiro research found 2,539 real secrets in 1,994 public GitHub repositories: database passwords, cloud keys, API tokens, SSH root…
Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Vincent Lefevre on Nov 05 Perhaps, but in any case, it is up to the application to check error conditions, in particular that the result contains only valid…
zlib 1.4 released with security fixes
Posted by Alan Coopersmith on Nov 05 https://github.com/madler/zlib/releases/tag/v1.4 lists these security fixes:
Re: "sshole": password authentication bypass: OpenSSH + musl libc
Posted by Loganaden Velvindron on Nov 05 It's unfortunate that some people are writing misleading statements about a security problem in OpenSSH, especially on linkedin…
Announce: Portable OpenSSH 10.6p2 released
Posted by Damien Miller on Nov 05 Portable OpenSSH 10.6p2 has just been released. It will be available from the mirrors listed at https://www.openssh.com/ shortly…
PIMROP: A Feasibility Study of Return-Oriented Programming on Commercial Processing-in-Memory Architectures
arXiv:2611.06036v1 Announce Type: new Abstract: Processing-in-Memory places small programmable cores on the memory device, where they execute beside the DRAM banks and…