Replies (5)

LL62's avatar
LL62 6 days ago
That does not seem to be a good idea: "A newly disclosed OpenSSH vulnerability dubbed "*sshole" lets attackers log in to Alpine Linux and other musl-based systems whose accounts are configured to block password authentication by submitting an oversized password, BleepingComputer reported. Password-disabled accounts are standard hardening for root and service access, so the flaw turns a default lockdown into an entry point on affected hosts"
LL62's avatar
LL62 6 days ago
It seems openwrt is using dropbear instead of openssh and therfore not affected. Can someone confirm this?
↑