SecuritySecurityWeekabout 1 hour ago
OpenSSH Patches Critical SSHole Authentication Bypass
3 min read
OpenSSH released emergency patches for CVE-2026-123158, a high-severity flaw allowing logins via passwords between 257 and 1,024 characters. The defect affects Linux distributions using musl libc with PAM disabled, including Alpine Linux versions 3.21 through 3.24 and edge. OpenSSH developer Damien Miller stated the release is urgent because AI agents rediscover bugs rapidly.
Level
Hype check
Tap to vote and see what everyone thinks.
