Sshole
Summary
The article surveys a long standing OpenSSH vulnerability on musl based systems where password based logins can be compromised due to crypt and a 256 byte password cap. It walks through the historical changes from early UNIX password handling to musl specific behavior, CVE-2016-6210, and Alpine fixes through 2022 and 2024 libxcrypt updates, with a call to audit and harden password authentication. It offers practical remediation steps including upgrading OpenSSH and disabling password logins.