> TritonInfoSec News
Home / Nov 06, 2026 / Story
0
#1 The Hacker News general November 05, 2026 at 16:42 UTC

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

By [email protected] (The Hacker News)

AI Summary

OpenSSH released emergency patch version 10.6p2 for a critical vulnerability dubbed '*sshole' affecting Alpine Linux's openssh-server package. Attackers with network access can authenticate to accounts configured with no password (such as SSH key-only accounts) using any password between 257 and 1,024 bytes long, bypassing authentication entirely. Alpine has also published fixed packages for all affected versions, and other musl libc-based distros may be vulnerable as well.

Read full article → https://thehackernews.com/2026/11/openssh-issues-e…

Relevance score: 92.0/100

# More from November 06

  1. 2
    OpenAI AI Pipeline Generates 948 Linux Root Escalation Exploits in 30-Hour Run The Hacker News
  2. 3
    Zyxel GS1900 Patch Fails to Block Zero-Day Exploit Allowing Root Command Execution The Hacker News
  3. 4
    Debian and Ubuntu APT Flaw Lets MitM Attackers Swap Verified Packages and Run Code as Root The Hacker News
  4. 5
    SonicWall Won't Patch EoL GMS Flaws That Could Expose Files, Alter Database Records The Hacker News
  5. 6
    Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes SecurityWeek
  6. 7
    Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says The Hacker News
  7. 8
    French bank confirms cyber heist, hackers suspected to have stolen an estimated $133 million The Record
  8. 9
    Cyberattack disrupts blood storage refrigeration systems in France BleepingComputer
  9. 10
    Critical Rails Flaw Lets Attackers Write Server Files via Crafted ImageMagick Uploads The Hacker News