OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability

4 comments

• throwa3562621 hour ago
  musl only, the quick fix:<p><pre><code> PasswordAuthentication=no </code></pre> Which is a good advice in general.
• jordiburgos44 minutes ago
  Workaround? Why not a fix?
  • ale4239 minutes ago
    AFAIU because the bug is in musl and not in OpenSSH
• crest1 hour ago
  I&#x27;m sure some people running lightweight containers just had a heart attack.
  • smw3 minutes ago
    I would imagine the vast majority of lightweight containers don&#x27;t contain an ssh server?
• phoronixrly1 hour ago
  I presume Dropbear, thus musl-based OpenWrt routers are also not affected? Not that Dropbear has been an example in that regard.
  • manwe15057 minutes ago
    Since after you posted, various people in the thread have reported dropbear is not affected