On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek.