Open-source SSH implementation
Appears in 1 story · Last updated Nov 6, 2026
Released version 10.6p2 with a workaround on November 5, 2026
Any password longer than 256 characters will log an attacker into an account set up for SSH-key login only, on Alpine Linux and other systems that pair the musl C library with OpenSSH. The flaw, nicknamed *sshole, has worked that way since 2016.
Updated 2 hours ago
No stories match your search
Try a different keyword
How would you like to describe your experience with the app today?
