Tech article
OpenSSH Issues Emergency Fix for Flaw Letting Long Passwords Bypass SSH Auth on Alpine Linux - The Hacker News
Publisher description: OpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using long passwords.
NewsAPI | Nov 5, 2026 | The Hacker News
Automated excerpt
Alpine's openssh-server package is built without PAM, and password logins are on by default. An account has * as its password field, which means no password is set. Without PAM, sshd checks a password itself.
Selected automatically from source text; not independently written or fact-checked. Read the original for full context.