{
  "meta": {
    "version": "v1",
    "pricing": {
      "public": {
        "label": "Public",
        "description": "Read-only API access for lightweight status checks and public integrations."
      },
      "premium": {
        "label": "Premium",
        "description": "API keys with higher hourly quotas, plus Slack, Teams, Discord, webhook, and email outage alerts across your vendor stack."
      }
    },
    "generatedAt": "2026-11-06T21:14:20.964Z"
  },
  "data": {
    "id": "incident_statuspage_linode_fc9c3k1n3ph1",
    "slug": "linode-customer-security-advisory-openssh-password-authentication-bypass-2026-11-05-3k1n3ph1",
    "title": "Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]",
    "summary": "Customer Security Advisory: OpenSSH Password Authentication Bypass Vulnerability [CVE-2026-123158]",
    "status": "resolved",
    "stale": false,
    "severity": "minor",
    "startedAt": "2026-11-05T17:40:53.27+00:00",
    "updatedAt": "2026-11-06T16:02:14.497+00:00",
    "resolvedAt": "2026-11-05T17:40:53.341+00:00",
    "provider": {
      "slug": "linode",
      "name": "Linode"
    },
    "affectedServices": [
      {
        "slug": "linode-cloud-manager",
        "name": "Cloud Manager & API"
      }
    ],
    "links": {
      "html": "/incidents/linode-customer-security-advisory-openssh-password-authentication-bypass-2026-11-05-3k1n3ph1",
      "api": "/api/v1/incidents/linode-customer-security-advisory-openssh-password-authentication-bypass-2026-11-05-3k1n3ph1",
      "providerHtml": "/providers/linode",
      "alerts": "https://outagedeck.com/account?stack=linode&utm_source=api&utm_medium=response&utm_campaign=api_alerts&utm_content=incident"
    },
    "impactSummary": "Linode reported this event with no impact level.",
    "source": {
      "id": "source_linode_status",
      "kind": "official_api",
      "name": "Linode Status",
      "checkedAt": "2026-11-06T21:10:11.119+00:00",
      "stale": false,
      "officialUrl": "https://status.linode.com",
      "statusPageUrl": "https://status.linode.com"
    },
    "updates": [
      {
        "id": "update_statuspage_linode_fc9c3k1n3ph1_h3ksl5353d7r",
        "status": "resolved",
        "body": "Akamai is aware of the <a href=\"https://sshhole.com\">password authentication bypass vulnerability</a> affecting certain Linux systems using <a href=\"https://www.openwall.com/lists/musl/2026/11/05/4\">musl libc</a> that was recently mitigated by an <a href=\"https://openssh.com/releasenotes.html#10.6p2\">urgent OpenSSH update</a>.  Since Alpine Linux is specifically called out as being affected, we wanted to assure customers that Linode’s Alpine images are not affected by this vulnerability.  Linodes using password-less provisioning do not have password authentication enabled by default unless customers change this configuration option in sshd_config after launch, while linodes launched using a password do not have any unlocked user accounts with a password hash set to ‘*’.\n\nHowever, we would like to use this opportunity as a reminder for customers to consider disabling password authentication permanently in favor of more secure mechanisms such as SSH keys or SSH CA certificates.",
        "createdAt": "2026-11-05T17:40:53.341+00:00"
      }
    ],
    "access": {
      "plan": "public",
      "keyed": false
    }
  }
}