OpenSSH 10.6p2 Closes a Password Bypass on Some musl Linux Servers
OpenSSH 10.6p2 and Alpine patches address CVE-2026-123158, a password bypass limited to particular musl, non-PAM SSH configurations. Installing a fix is only half the job: the daemon must be restarted.
8 min read ↗