OpenSSH 10.6p2 Patches Decade-Old 'SSHole' Flaw in Alpine Linux
A critical vulnerability dubbed 'SSHole' allows attackers to bypass password authentication on certain Linux systems by submitting an overly long password. The flaw, present since 2016, affects systems using the musl C library without Pluggable Authentication Modules (PAM). OpenSSH released version 10.6p2 on November 5, 2026, to fix the issue, while Alpine Linux issued patches for all supported branches. No active exploitation has been reported, but administrators are urged to update immediately or disable password authentication.