OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability

3 comments

• throwa356262 29 minutes ago

  musl only, the quick fix:

       PasswordAuthentication=no
  
  

  Which is a good advice in general.
• crest a minute ago

  I'm sure some people running lightweight containers just had a heart attack.

• phoronixrly 2 minutes ago

  I presume Dropbear, thus musl-based OpenWrt routers are also not affected? Not that Dropbear has been an example in that regard.