New OpenSSH Vulnerability

A newly disclosed vulnerability in OpenSSH, in combination with musl, has been discovered, which has been present in the code for about 10 years. This flaw, referred to as sshole, allows attackers to log in to certain accounts on Alpine Linux and other musl-based Linux systems. These systems must be configured to block password authentication for the vulnerability to be exploited. Attackers can gain access by entering a password that is longer than 256 bytes. The vulnerability affects specific Linux configurations, allowing unauthorized access despite password authentication being blocked.