@zyak@twtxt.z85b.xyz @klaxzy@klaxzy.net It’s a musl problem and it’s probably/hopefully not that horrible in practice, because “sane” setups don’t use PasswordAuthentication yes anyway. It’s a real vuln, yes, but I think it’s over-hyped – it’s not like every SSH server is wide open.