OpenSSH 10.6p2 ships a password bypass workaround for musl Linux systems
Damien Miller shipped OpenSSH 10.6p2 on November 5th for musl Linux systems without PAM, urging operators to disable password authentication or SSH.
By RuntimeWire Staff · Published
Primary source: Hacker News
Why it matters
OpenSSH is default remote-access infrastructure across servers and containers. A password authentication bypass on musl Linux without PAM puts minimal systems that often skip PAM at risk, and OpenSSH says AI-driven rediscovery has made long embargoes dangerous.
Damien Miller, the longtime OpenSSH developer who started working on the project in 1999 to port it to other platforms, announced OpenSSH 10.6p2 on November 5th, 2026 with a workaround for a critical password authentication bypass. The OpenSSH release notes date Portable OpenSSH 10.6p2 to November 5th, 2026.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.