Critical security vulnerability affects OpenSSH on Alpine Linux systems

OpenSSH 10.6p2 ships a workaround for a critical vulnerability on Linux systems that use musl libc with PAM disabled, such as Alpine Linux. OpenSSH developer Damien Miller urged affected users to immediately set PasswordAuthentication=no or disable SSH entirely. The bug does not affect non-Linux systems, Linux/glibc systems, or Linux systems using PAM for password authentication. Miller says the root cause lies outside OpenSSH itself, but a mitigation could still be shipped quickly. Alpine Linux will backport the fix all the way back to Alpine 3.16, released in May 2022.

Source: https://lwn.net/Articles/1105464. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.

Recommended for you

XDA Developers5 Hot3 min14 h ago

Replacing Raspberry Pi OS with this lightweight distro made my SBC faster than any hardware upgrade

Software was slowing down my Pi.

#linux#docker#raspberry-piSource

Phoronix1 Hot3 min3 h ago

Linux 7.4-rc2 Released With FAT32 Optimization, AMDGPU HDMI 2.2 Improvement

Linus Torvalds released Linux 7.4-rc2, calling it a big rc2 following the largest ever rc1. The release includes a notable FAT32 performance improvement, especially for synchronous mounts, AMDGPU driver fixes for HDMI 2.2 FRL, and numerous fixes for long-standing core memory management bugs. Torvalds noted the diffstat looks benign and is largely driven by automated coccinelle script updates that add noise, and that AI-generated fixes and bug reports continue to pour in. He said Alexei claims fixes on the bpf side are now coming in faster than new reports. Linux 7.4 is aiming for a stable release around the end of December.

#linux#gpu#filesystemsSource

freeCodeCamp244 Hot2 min10 d ago

Learn Real-World Penetration Testing: Hands-On Ethical Hacking Crash Course

Understanding how malicious actors infiltrate networks is the first step to building resilient infrastructure. To help developers and aspiring security analysts learn the fundamentals of offensive sec

#security#cyber#linuxSource

Hacker News1 Hot4 min5 h ago

A Little Snitch for Windows

PacketHound is a free outbound firewall for Windows. The first time an app tries to connect to the internet, it asks you: Allow or Block.

#security#open-source#windowsSource

Hacker News30 Hot4 min2 d ago

Pwn.college

pwn.college is a free, hands-on education platform for learning core cybersecurity and hacking skills, maintained by a team at Arizona State University. Learners progress through belt ranks, starting with a 'white belt' and earning belts through practice. Hackers continue beyond the platform to 'brown belt' and eventually 'black belt' status, which must happen outside the dojo. The site powers much of ASU's cybersecurity curriculum and asks users not to post writeups or walkthrough videos of challenge solutions. It points learners toward CTFtime.org for Capture The Flag events and a GitHub list of wargames for further practice. The underlying infrastructure is open source and accepts pull requests, though some modules remain closed-source.

#security#cyberSource

Hacker News1 Hot1 min6 h ago

Dux: Free, open-source Wayland desktop shell with file manager and theming

A modern Linux desktop suite with beautiful widgets and powerful monitoring - optimized for niri, Hyprland, mangowm, Sway, and Miracle WM.

#linux#monitoring#window-managerSource

Noted6 Hot4 min1 d ago

Tailscale Subnet Routing: Access Your Entire Homelab

Learn how to configure Tailscale subnet routing to securely access your home network remotely without installing Tailscale on every device.

#linux#networking#vpnSource

XDA Developers1 Hot4 min9 h ago

The PlayStation 3 briefly made buying a console a way to buy a Linux computer

It was a little too good at what it did, though.

#linux#hardware#sonySource