On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek.

https://www.securityweek.com/openssh-rushes-patches-for-sshole-authentication-bypass/