OpenSSH 10.6p2 釋出關鍵漏洞緩解方案
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability
OpenSSH 10.6p2 釋出了針對關鍵漏洞的緩解方案，影響使用 musl libc 且無 PAM 的 Linux 系統。
- 關鍵漏洞：影響使用 musl libc 且無 PAM 的 Linux 系統（如 Alpine Linux）。
AI 伴隨問答
針對這篇報導有疑問？可直接點選快捷問題或向 AI 追問背景脈絡與技術細節：
OpenSSH 10.6p2 釋出關鍵漏洞緩解，提示 Alpine Linux 使用者立即停用密碼驗證，提醒快速修補對抗 AI 迅速重現。
Damien Miller: "OpenSSH 10.6p2 has been releas…" - Hachyderm.io
- Skip to main contentHotkey 1
- Skip to main navigationHotkey 2
Recent searches
No recent searches
Search options
Only available when logged in.
hachyderm.io is one of the many independent Mastodon servers you can use to participate in the fediverse.
Hachyderm is a safe space, LGBTQIA+ and BLM, primarily comprised of tech industry professionals world wide. Note that many non-user account types have restrictions - please see our About page.
Administered by:
[
Hachyderm@hachyderm](https://hachyderm.io/@hachyderm "hachyderm")
Server stats:
7.4K
active users
hachyderm.io:
Mastodon:
Back
Damien Miller@damienmiller@hachyderm.io
OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.
[https://openssh.com/releasenotes.html#10.6p2](https://openssh.com/releasenotes.html#10.6p2 "https://openssh.com/releasenotes.html#10.6p2")
If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set PasswordAuthentication=no or disable SSH for these systems IMMEDIATELY.
This vulnerability does not exist on non-Linux systems, Linux/glibc systems and Linux systems that use PAM for password authentication.
We consider the root cause of this bug to be outside OpenSSH itself, but we're in a good position to deliver a mitigation quickly.
We are making this release as fast as possible (we learned of the problem yesterday) because we have recently observed multiple cases of rapid bug rediscovery by AI agents, sometimes within hours, and so now consider long embargo periods to be a dangerous practice that primarily benefits attackers.
Thanks for Özgün Kültekin of Wakefield (wakefield.co) for reporting this problem to us and for the Alpine Linux developers for making an updated release available at very short notice.
openssh.comOpenSSH: Release NotesOpenSSH release notes
113 boosts·5 quotes·48 favorites
[
Leah Neukirchen@leah@blahaj.social](https://hachyderm.io/@leah@blahaj.social "@leah@blahaj.social")1h
[@damienmiller](https://hachyderm.io/@damienmiller "@damienmiller") can you clarify if this applies to a build with --with-pam but then using "UsePAM no"?
1
[ Damien Miller@damienmiller](https://hachyderm.io/@damienmiller "@damienmiller")53m
[@leah](https://hachyderm.io/@leah@blahaj.social "@leah@blahaj.social") yes it does apply to this configuration
1
[ Leah Neukirchen@leah@blahaj.social](https://hachyderm.io/@leah@blahaj.social "@leah@blahaj.social")50m
[@damienmiller](https://hachyderm.io/@damienmiller "@damienmiller") the release notes say "when built and run with PAM support disabled." that should be "or" then?
0
[
Daniel Gibson@Doomed_Daniel@mastodon.gamedev.place](https://hachyderm.io/@Doomed_Daniel@mastodon.gamedev.place "@Doomed_Daniel@mastodon.gamedev.place")38m *
[@damienmiller](https://hachyderm.io/@damienmiller "@damienmiller")
Do you have any information about the musl vulnerability? Is it one already fixed upstream (is it that regex thing)?
Do you know if Dropbear SSH is also affected (used commonly on embedded systems with musl)?
1
[ Damien Miller@damienmiller](https://hachyderm.io/@damienmiller "@damienmiller")15m
[@Doomed_Daniel](https://hachyderm.io/@Doomed_Daniel@mastodon.gamedev.place "@Doomed_Daniel@mastodon.gamedev.place") I'll leave that for others to talk about. I'd rather not myself at this stage
0
[](https://hachyderm.io/)
Mastodon is the best way to keep up with what's happening.
Follow anyone across the fediverse and see it all in chronological order. No algorithms, ads, or clickbait in sight.
Drag & drop to upload