OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass

OpenSSH has released patches to address an authentication bypass issue. The vulnerability affects Linux distributions that use musl libc without PAM, allowing certain accounts to accept any password with a length of 257 to 1024 characters. This means that passwords within this character range are not properly validated for these accounts. The issue has been dubbed 'SSHole'. The patches are intended to fix this authentication bypass problem.