Hacker News

points by tiffanyh 3 days ago | 0 comments

Since OpenSSH is included in the base install, and enabled on OpenBSD - is it correct that they will need to update the famous:

“Only two remote holes in the default install, in a heck of a long time!”

https://www.openbsd.org/

[–] somat 3 days ago

OpenBSD is not affected, so apparently they are doing something right. But also glibc linux is not affected and pam linux is not affected, so it is only musl linux with the remote hole.

[–] bigbadfeline 3 days ago

You became a victim of a very misleading post title. This isn't an OpenSSH problem at all, it's a musl problem.

I'm pretty sure the misleading wording is deliberate, OpenSSH is an excellent but non-commercial project which a bunch of entities would love to gain control of, in order to bug it with their spyware - thus the constant nagging on the bot-infested web.

The OP should be flagged.

[–] mldbk 3 days ago

OpenBSD doesn't provide musl-linked OpenSSH by default, so not yet[x2]

[–] heavensteeth 3 days ago

No, the bug is in musl but manifests in OpenSSH when compiled against it.

[–] rpicard 3 days ago

This vulnerability doesn’t exist on non-Linux systems, so not yet!