Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAOp4FwRmEMwxWdOC3O5W4ZG5nTFQZaYKy+hW37S7EhqqD7oztg@mail.gmail.com>
Date: Mon, 9 Nov 2026 22:43:38 +0400
From: Loganaden Velvindron <loganaden@...il.com>
To: oss-security@...ts.openwall.com
Cc: musl@...ts.openwall.com
Subject: Re: "sshole": password authentication bypass: OpenSSH
 + musl libc

On Fri, 6 Nov 2026 at 21:17, Martin Steigerwald <martin@...htvoll.de> wrote:
>
> Greetings.
>
> Matt Johnston - 06.11.26, 03:05:13 CET:
> > Prior to ~2019 when the OpenSSH change was made, Debian
> > would have shown a different manpage that only documents
> > NULL for error [1].

This is the approach I'm taking on my build of Alpine Linux.

I would like to also submit a patch to musl to have this as a build option.
@musl, any interest in having this as a build option ?

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.