Open Source Security mailing list
GNU InetUtils Security Advisory: Remote authentication bypass in telnetd https://www.openwall.com/lists/oss-security/2026/01/20/2 The "-f root" classic reintroduced via added USER environment variable processing in 2015. Affects at least Debian and derived distros.