On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.
The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek.