OpenSSH rushes patches for 'SSHole' authentication bypass
VULNERABILITYOpenSSHredteam/daily · 1 source
- Severity
- High
- Sources
- 1
What happened
The developers of a popular tool that lets people log in to computers remotely have released urgent fixes for a serious flaw. On some Linux systems, certain accounts could be opened with almost any long password.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Check whether your Linux systems use musl libc without PAM.
- Apply the OpenSSH patch from your Linux distribution as soon as it is released.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
SecurityWeek