oss-sec mailing list archives

Re: "sshole": password authentication bypass: OpenSSH + musl libc

From: lists () notatla org uk
Date: Thu, 05 Nov 2026 23:10:52 +0000

Upon error, crypt_r, crypt_rn, and crypt_ra write an invalid hash
to  the  output field of their data argument, and crypt writes an


If an error string is output does not : or multiple :: better
express the aim of never seeing this as field content
(because it is field separator) ?

Current thread:

"sshole": password authentication bypass: OpenSSH + musl libc Jan Schaumann (Nov 05)
- Re: "sshole": password authentication bypass: OpenSSH + musl libc Loganaden Velvindron (Nov 05)
  - Re: "sshole": password authentication bypass: OpenSSH + musl libc Vincent Lefevre (Nov 05)
    - Re: "sshole": password authentication bypass: OpenSSH + musl libc lists (Nov 05)
    - Re: "sshole": password authentication bypass: OpenSSH + musl libc Vincent Lefevre (Nov 05)
    - Re: "sshole": password authentication bypass: OpenSSH + musl libc Michael Orlitzky (Nov 05)