https://seclists.org/oss-sec/2026/q4/567: "sshole": password authentication bypass: OpenSSH + musl libc
Published Nov 7, 2026
·Updated
Affected Software
3 affected components
OpenSSH OpenSSH
musl musl libc
libxcrypt libxcrypt
No. The discussion states that musl libc is not the only implementation with this behavior and points to libxcrypt as another component to consider.