https://www.live-feeds.com/feed/openssh-issues-emergency-fix-for-flaw-letting-long-passwords-bypass-ssh-auth-on-alpine-linuxContinuously updated, source-cited coverage. https://www.live-feeds.com/feed/openssh-issues-emergency-fix-for-flaw-letting-long-passwords-bypass-ssh-auth-on-alpine-linuxhttps://www.live-feeds.com/feed/openssh-issues-emergency-fix-for-flaw-letting-long-passwords-bypass-ssh-auth-on-alpine-linux#u196394Thu, 12 Nov 2026 07:35:05 +0000OpenSSH released version 10.6p2 on 5 November 2026 to patch CVE-2026-123158, a critical authentication bypass affecting Alpine Linux and other musl libc systems without PAM. The flaw, nicknamed "sshole," allows any password of 257 bytes or longer to succeed during password authentication, granting unauthorized access. The vulnerability carries a CVSS score of 8.1 and has been added to the CISA Known Exploited Vulnerabilities catalog. Attackers began targeting the flaw within hours of public disclosure, achieving root access on honeypot systems. Affected deployments include containeri