Vulnerabilities

Critical OpenSSH bug lets attackers into some Alpine Linux servers with any long password

OpenSSH 10.6p2 fixes a critical bug that lets attackers log in to passwordless accounts on Alpine Linux and other musl systems by sending a password longer than 256 bytes. Here is who is exposed and how to fix it.