Critical security vulnerability affects OpenSSH on Alpine Linux systems
Fonte: LWN.net ·
Version 10.6p2 of OpenSSH has been released with a workaround for a critical vulnerability that affects Linux systems that use musl libc with PAM disabled, such as Alpine Linux . OpenSSH developer Damien Miller said : If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY. This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication. We consider the root cause of this bug to be outside Ope
Domande frequenti
Che cos'è Critical security vulnerability affects OpenSSH on Alpine Linux systems?
Critical security vulnerability affects OpenSSH on Alpine Linux systems is a articolo discovery curated from LWN.net. Version 10.6p2 of OpenSSH has been released with a workaround for a critical vulnerability that affects Linux systems that use musl libc with PAM disabled, such as Alpine Linux . O
Come posso accedervi o provarlo?
You can experience this content directly on its original host (LWN.net) by clicking the "Open Original" button.
Da dove proviene questo contenuto?
Curated from LWN.net by the OnSuggest team to surface the most interesting and serendipitous content on the web.
Altri simili
Tutte le scoperte in Tecnologia →When the Watchdogs Are Silenced: India's Crackdown on Those Documenting Online Censorship
On November 3, our colleagues at the Software Freedom Law Center, India (SFLC.in) received notifications from X that the Delhi Police had issued takedown requests targeting 42 URLs. Among the accounts and posts targeted were those belonging to SFLC.in , the Internet Freedom Foundation (IFF), and X account @geoblockedindia, as well as posts documenting legal notices and instances of online censorship. Takedown requests targeting SFLC.in and other digital rights groups threaten not only their work, but the public’s ability to know when and how online speech is being restricted. The requests cite
Decentralized AI Inference Needs a Boring Job Queue
A backend engineer's proposal for reliable decentralized GPU inference using job queues, retries, and idempotency, so remote AI jobs don't fail or bill twice.
Why SSH Still Matters After More Than 30 Years
SSH is a network protocol that allows secure remote access to computers over a potentially untrusted network.
Learjet Crash Has Brought The Conspiracy Crowd Out of The Woodwork
People who appear to have little understanding of aviation present themselves as authorities on aircraft structures.
“Move Fast and Break Things” Is Dead. What Counts in Enterprise AI Now?
Discover why enterprise AI is shifting from "move fast and break things" to a focus on cost control, ROI, and financial accountability in today's landscape.
Google's 2027 LSA Expansion Has an API Availability Problem
Google's 2027 LSA expansion raises API-readiness questions for international campaigns. Examine regional restrictions, provisioning, and integration risks.