Security advisory: openssh-server password authentication bypass
Summary
Alpine Linux issued a security advisory for an OpenSSH password authentication bypass in openssh-server. It explains how an attacker could log in without a password under certain conditions and provides patch versions and a workaround to disable password authentication if patching isn't possible. The article also includes detection guidance and post-attack considerations.