OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

The Hacker News · Thursday, 5 November 2026 at 16:42 (8h ago) · Original article ↗

Attackers can log in to accounts that have no password, such as SSH key-only accounts, on some Alpine Linux servers running the standard openssh-server package. They need network access to the server, an account name, and a password between 257 and 1,024 bytes long.

OpenSSH, which rates the flaw critical, released version 10.6p2 today to block it. Alpine has published fixed packages for every

You're reading a preview. The full article is published by The Hacker News on their website.

Read the full story on The Hacker News

Security

FBI, CISA warn of cyberattacks targeting refrigeration systems

The FBI and CISA warn that hackers are actively targeting industrial refrigeration and cold-chain monitoring systems worldwide, potentially causing food spoilage, equipment damage, and fire hazards. [...]

BleepingComputer 4m ago

Security

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

Certain configurations of Alpine are affected. Other distros may be as well.

Ars Technica 2h ago

Security

6 Best VPN Services (2026), Tested and Reviewed

Every VPN says it’s the best, but only some of them are telling the truth.

Wired 2h ago

OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

More Security & Privacy

FBI, CISA warn of cyberattacks targeting refrigeration systems

Meet *sshole, the vulnerability that lets hackers SSH into Linux devices

6 Best VPN Services (2026), Tested and Reviewed