Alpine Linux fixes OpenSSH password login bypass issue

VTBC ┋
Alpine Linux has patched an OpenSSH password authentication bypass that can let remote attackers log in to affected SSH servers without a password.


The issue affects non-PAM sshd setups with password authentication enabled, an account using a * password field, and another account with a $5$ or $6$ hash.


Administrators should update OpenSSH and restart sshd, or disable password authentication if they cannot update immediately.


View article on AlternativeTo »

More about Alpine Linux | Alpine Linux Alternatives Explore the content:


http://dlvr.it/TWDltd

Comments

Post a Comment

Popular Content

Scientists Discover a Hidden Hydrogen Pathway That Could Transform CO2 Into Valuable Fuel

VTBC ┋
Image
Scientists have uncovered an unexpected pathway for hydrogen transfer during catalytic CO2 conversion. A computer model designed to predict how carbon dioxide becomes useful chemicals produced a surprising error: It identified formic acid as the main product instead of methanol. When scientists expanded the model to account for thousands of previously overlooked reactions, its predictions [...] Explore the content: http://dlvr.it/TVsP0n
Read more

Rust 1.99 brings extern “C” variadics support and layout information from raw pointers

VTBC ┋
Image
The Rust development team has officially released version 1.99, bringing significant enhancements to the systems programming language. The release introduces stabilized support for C-ABI variadic functions with “C” and “C-unwind” ABIs, allowing developers to now write variadic functions directly in Rust rather than just calling externally-defined ones like those in libc. This capability fills a longstanding gap for FFI-heavy applications that require compatibility with C-style variable argument lists. Beyond the variadic function support, the release delivers practical improvements for memory management and unsafe code. Three new functions, Layout::for_value_raw, mem::size_of_val_raw, and mem::align_of_val_raw, now enable retrieval of size and alignment information from raw pointers to both sized and unsized types. The team also updated documentation to recommend against patterns involving round-trip unleaking after Box::leak, citing problematic interactions with compiler optimizati...
Read more

Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability

VTBC ┋
Image
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of r/opensource, Reddit’s catch-all forum for open source software, have barred any project that “uses AI, is made by AI, or is intended for AI.” Moderator Wolvereness announced the rules in a post over the weekend. AI slop is piling up highest on the biggest open-source projects The … More → The post Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability appeared first on Help Net Security. Explore the content: http://dlvr.it/TW7vt8
Read more

Elon Musk Grok AI Predicts a Wild End to 2026 for Bitcoin

VTBC ┋
Image
Elon Musk’s Grok AI predicts the next three months will be unusually consequential, projecting Bitcoin could hit an impressive 2x return by January 1, 2027.Today (October 3), BTC USD is trading for around $84,500, and Grok AI claims that in the event of a full-blown bull market, it could surge to $180,000 in the best-case […] The post Elon Musk Grok AI Predicts a Wild End to 2026 for Bitcoin appeared first on Cryptonews. Explore the content: http://dlvr.it/TVm4pj
Read more