‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that...
International Cyber Digest@IntCyberDigest
14 views
Nov 05, 2026
~1 min read
Advertisement
1
‼️ BREAKING: OpenSSH has rushed out a fix for a critical flaw that lets attackers log into some Linux servers without the right password.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
The team learned of the bug a day earlier. OpenSSH's Damien Miller says long embargoes now mostly help attackers, because AI agents rediscover bugs, sometimes within hours.
It hits Linux systems on the musl C library with PAM off, such as Alpine Linux. Miller told admins to disable password logins or SSH itself "IMMEDIATELY".
Version 10.6p2 works around it. Systems on glibc or PAM are not affected, and Miller says the root cause sits outside OpenSSH.
2
Source: openssh.org/txt/release-10…
Don't miss out on any news, join our newsletter: internationalcyberdigest.com/newsletter/
Be sure to join our TG channel: t.me/IntCyberDigest
Don't miss out on any news, join our newsletter: internationalcyberdigest.com/newsletter/
Be sure to join our TG channel: t.me/IntCyberDigest