Schneier on Security46m agoenergy 120
New OpenSSH Vulnerability
image: Schneier on Security
It’s a bad one , and it’s been in the code for a decade: A newly disclosed flaw involving OpenSSH and musl, dubbed “*sshole,” allows attackers to log in to certain Alpine Linux and other musl-based Linux accounts configured to block password authentication simply by entering an oversized password. “Oversized” means longer than 256 bytes. Details . Slashdot thread . And another news article .
This source publishes only a summary in its feed, so the full article lives at the outlet. The link above and below goes to the original.