Security · 6 November 2026

OpenSSH 'sshole' flaw bypasses password blocks on musl Linux

A vulnerability in OpenSSH allows attackers to log into Alpine Linux and other musl-based systems with password authentication disabled by entering an oversized password. The flaw, present since 2016, stems from how the musl C library handles password verification errors for accounts with invalid hashes.

Why it matters

Background only: The text describes a security vulnerability without detailing product features or user-facing changes.

For product managers

For your product
What does this mean for your product?
Try it on your product

Get this every morning, written for your product.

Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.