Friday 6 November
Global

Your region, kept on this device.

OpenSSH rushes patches for 'SSHole' authentication bypass

Severity
High
Sources
1

The developers of a popular tool that lets people log in to computers remotely have released urgent fixes for a serious flaw. On some Linux systems, certain accounts could be opened with almost any long password.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

  1. Check whether your Linux systems use musl libc without PAM.
  2. Apply the OpenSSH patch from your Linux distribution as soon as it is released.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Fri 6 NovemberOpenSSH Rushes Patches for ‘SSHole’ Authentication BypassSecurityWeek

Who reported · 1 outlet

SecurityWeek

Who and what is in it

Report a problem