Hacker News

points by phoronixrly 3 days ago | 0 comments

I presume Dropbear, thus musl-based OpenWrt routers are also not affected? Not that Dropbear has been an example in that regard.

[–] mijoharas 3 days ago

There is this write-up/fancy page from the person who found the vulnerability[0] (HN discussion[1], how I found this thread).

At the bottom of that it says dropbear is unaffected.

> on debian, ubuntu, fedora or anything else with glibc? going through pam? dropbear? openbsd? you're fine

[0] https://sshhole.com/

[1] https://news.ycombinator.com/item?id=50378228

[–] Namidairo 2 days ago

No, the majority should not be affected.

Except in the case where their images are built with OpenSSH instead of Dropbear, which is the case for some manufacturers. (Turris, was noted as one such vendor)

[–] manwe150 3 days ago

Since after you posted, various people in the thread have reported dropbear is not affected