alt Hacker NewsSince OpenSSH is included in the base install, and enabled on OpenBSD - is it correct that they will need to update the famous:
“Only two remote holes in the default install, in a heck of a long time!”
Replies
mldbk • today at 1:52 PM
OpenBSD doesn't provide musl-linked OpenSSH by default, so not yet[x2]
rpicard • today at 1:47 PM
This vulnerability doesn’t exist on non-Linux systems, so not yet!
➕ show 1 reply
heavensteeth • today at 1:54 PM
No, the bug is in musl but manifests in OpenSSH when compiled against it.
OpenBSD is not affected, so apparently they are doing something right. But also glibc linux is not affected and pam linux is not affected, so it is only musl linux with the remote hole.