Follow @Openwall on Twitter for new release announcements and other news
[<prev] [<thread-prev] [day] [month] [year] [list]
Message-ID: <e5b223fc-dd55-9707-46ea-0ccaa56531bf@mirbsd.de>
Date: Fri, 6 Nov 2026 04:36:14 +0100 (CET)
From: Thorsten Glaser <tg@...bsd.de>
To: musl@...ts.openwall.com
Subject: Re: Advisory for OpenSSH+musl users

On Fri, 6 Nov 2026, Loganaden Velvindron wrote:

>Do you have the list of software which were breaking and which caused
>this change in musl in the first place (commit:b3c4cc121f70f) ?

No full list, but, the reverse change in GNU glibc/libxcrypt (begin
to return NULL) broke at least:

• GNU CVS
• shadow-tools
• cyrus-sasl2 (CVE-2013-4122)
• xlock

While POSIX made allowance for returning NULL, this does not match
historic pre-existing behaviour on many systems, which at that point
would have been the observed and possibly documented one.

bye,
//mirabilos
-- 
https://toot.mirbsd.org/@mirabilos/statuses/01KNQD9RNZM1Z2A61AZHG857MP
↑ long list of references on why “AI”/LLMs are bad for everyone
also: ↓ from https://toot.cat/@dthompson/117180306961006760
> "responsible LLM usage" is the "clean coal" of the tech world

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.