OpenSSH 10.6p2 released with musl libc workaround
Original title: OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability
OpenSSH 10.6p2 includes immediate mitigation for critical vulnerability affecting Linux systems using musl libc without PAM.
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability affecting Linux systems that use musl libc without PAM support. The release was made quickly after the problem was reported, as multiple cases of rapid bug rediscovery by AI agents have been observed. Users on affected systems should set PasswordAuthentication=no or disable SSH immediately.
- Applies to systems with musl libc without PAM
- Does not affect non-Linux systems
- Reported by Özgün Kültekin of Wakefield
- Workaround provided by Alpine Linux developers
- Dropbear SSH not affected
Impact: critical remote code execution
- 1.Set PasswordAuthentication=no
- 2.Disable SSH
- 3.Update to OpenSSH 10.6p2
From the original article
2 min read at hachyderm.iohachyderm. io is one of the many independent Mastodon servers you can use to participate in the fediverse. Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide.
By Animux · hachyderm.io
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.