Security · 6 November 2026
OpenSSH 'sshole' flaw bypasses password blocks on musl Linux
A vulnerability in OpenSSH allows attackers to log into Alpine Linux and other musl-based systems with password authentication disabled by entering an oversized password. The flaw, present since 2016, stems from how the musl C library handles password verification errors for accounts with invalid hashes.
Why it matters
Background only: The text describes a security vulnerability without detailing product features or user-facing changes.
For product managers
For your product
What does this mean for your product?
Try it on your product More from this issueAll AI news from 6 Nov →
Get this every morning, written for your product.
Deltaday reads the whole AI news cycle and tells you what changed, whether it's real yet, and what to do about it.