News for hackers. Stuff that matters.

A comment on Sshole.

Re:Sshole by gquere on Thursday November 05, 2026 @09:15AM (#50379327)
Why is this not yet published on the official website and why is there no CVE? https://www.openssh.org/security.html
[ Parent | on HN ]
Re:Sshole by doodlesdev on Thursday November 05, 2026 @09:36AM (#50379604)
OpenSSH considers this to be a vulnerability in musl and not OpenSSH, but shipped a fix anyways since that helps mitigate impact... Whether you agree with that or not, it's up to you :)
[ Parent | on HN ]
Re:Sshole by mkj on Thursday November 05, 2026 @10:09AM (#50380056)
Probably because mitre take days to weeks to give out CVE numbers (if ever). Just get the fix out there.
[ Parent | on HN ]