Critical · 1 source · latest 7h

OpenSSH emergency fix for flaw letting long passwords bypass SSH login on Alpine Linux

CRITICAL · VULNERABILITYOpenSSHredteam/daily · 1 source

Severity: Critical
Sources: 1

What happened

A flaw in the software that lets people log in remotely to some Alpine Linux servers can let attackers into accounts that have no password, such as accounts that only use a special key. OpenSSH has released an emergency fix, and Alpine has published updated packages.

Like I’m new · Written by AI from 1 source · Wrong?

What to do

Update OpenSSH to version 10.6p2 or later.
Install the fixed openssh-server packages that Alpine Linux has published.
Check whether any Alpine Linux servers run openssh-server and have accounts without passwords.

Written by AI from the sources, checked against them

Read the full story at the source