(⁠◔⁠‿⁠◔⁠) Are you OK？✨ Thinking...http://tg.okhk.nethttp://tg.okhk.net/posts/11972http://tg.okhk.net/posts/11972Thu, 05 Nov 2026 12:10:50 GMT<div class="tgme_widget_message_forwarded_from accent_color">Forwarded from <a class="tgme_widget_message_forwarded_from_name" href="https://t.me/outvivid/4953" target="_blank" rel="noopener"><span>层叠 - The Cascading</span></a></div><i class="emoji"><b><span class="post-title-source">🔴</span></b></i><span class="post-title-source"> Alpine Linux 等系统上的 </span><mark class="highlight"><span class="post-title-source">OpenSSH</span></mark><span class="post-title-source">：请禁用密码登录或更新。</span><br /><br />- <mark class="highlight">OpenSSH</mark> 在无 PAM 支持的 musc libc 类发行版（例如 Alpine Linux）上的密码验证可能可以被跳过。<br />- 除了更新之外的 mitigation 是禁用密码登录 (PasswordAuthentication=no)。<br />- 漏洞并非来自 <mark class="highlight">OpenSSH</mark> 自身，但 <mark class="highlight">OpenSSH</mark> 发布新版本进行了处理。<br /><br />Fixed-At: 10.6p2<br /><br /><a href="https://hachyderm.io/@damienmiller/117563026759098135" target="_blank" rel="noopener" title="https://hachyderm.io/@damienmiller/117563026759098135">https://hachyderm.io/@damienmiller/117563026759098135</a><br /><br /><a href="/search/result?q=%23OpenSSH" title="#OpenSSH">#OpenSSH</a><a class="tgme_widget_message_link_preview" href="https://hachyderm.io/@damienmiller/117563026759098135" target="_blank" rel="noopener" title="OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability.https://openssh.com/releasenotes.html#10.6p2If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set Password…"> <div class="link_preview_site_name accent_color">Hachyderm.io</div> <div class="link_preview_title">Damien Miller (@damienmiller@hachyderm.io)</div> <div class="link_preview_description"><mark class="highlight">OpenSSH</mark> 10.6p2 has been released with a workaround for a critical vulnerability.<br /><br />https://<mark class="highlight">openssh</mark>.com/releasenotes.html#10.6p2<br /><br />If you operate a Linux system that uses musl libc without PAM (Alpine Linux is one example) then stop reading and set Password…</div> </a>