OpenSSH Patches 'SSHole' Auth Bypass Affecting Linux/musl Systems

OpenSSH has released patches for a critical authentication bypass vulnerability, dubbed 'SSHole', that affects Linux distributions using musl libc without PAM. The flaw allows any password between 257 and 1024 characters to authenticate successfully, potentially granting unauthorized access. The vulnerability is actively being exploited or poses immediate risk, and system administrators are urged to patch promptly.

AI disclosure: Model-written summary of the source, not a verified fact. Check the sources. How Mosaic works