OpenSSH flaw allows oversized passwords to bypass some login restrictions

Published Tuesday, November 10, 2026 · 7:07 AM EST

A newly disclosed flaw involving OpenSSH and musl lets attackers log in to certain Linux accounts configured to block password authentication, Schneier on Security reports. The vulnerability, dubbed "*sshole," affects certain accounts on Alpine Linux and other Linux systems based on musl. Attackers can bypass the restriction by entering a password longer than 256 bytes. The flaw has been in the code for a decade.

Sources

Schneier on Security

Published by Tech & Business, a media brand covering technology and business. This story was sourced from Schneier on Security and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

Capital

Redalpine closes €222.53 million fund for European startups

Swiss venture capital firm redalpine announced the final close of its Capital VIII fund at €222.53 million ($250 million), targeting approximately 20 early-stage companies across Europe. New investors include Aviva Investors, Flexstone Partners and KfW.

AI Infrastructure

AWS commits $100M in cloud and AI credits for health projects

Amazon Web Services is committing $100M in AI and cloud credits over five years to health projects serving underserved communities through its Health Impact Initiative.

Capital AI

Sumary raises $25M to expand accounting software across Europe

Sumary, a Copenhagen-founded accounting software startup, raised $25M in a seed round led by Singular, with participation from existing investors byFounders, Partech and Tenity.

Infrastructure Policy

Thailand imposes noise, heat and water rules on data centers

Thailand has imposed new rules governing noise, heat and water at data centers, Bloomberg reported. The environmental restrictions apply to an industry expanding rapidly as investment in artificial intelligence fuels a boom in data center development.

Capital Products

Numina raises €1.1 million to expand free accounting platform

Copenhagen-based Numina has raised €1.1 million in pre-Seed funding to support international expansion and further development of its accounting platform, EU-Startups reported. Participants include Nebular, Emblem and Founders A/S.

Capital

Elomia Health acquires Earkick to expand wellbeing chatbot technology

Elomia Health has acquired Earkick, an AI companion used by more than 250,000 people to track mood, sleep, activity and daily habits, Tech.eu reported. The acquisition expands the technology behind Elomia's API, which organisations can use to build wellbeing chatbots.