OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux

A critical flaw in OpenSSH has been discovered that allows attackers to bypass SSH authentication on certain Alpine Linux servers. This vulnerability enables access to accounts with no password, including those that typically require SSH keys. To exploit the flaw, an attacker needs network access to the server, a valid account name, and a password that falls within a specific length range. OpenSSH has released version 10.6p2 to address the issue, which the company considers critical. Alpine Linux has also published fixed packages to mitigate the vulnerability. The fix is intended to prevent unauthorized access to affected servers.