Critical security vulnerability affects OpenSSH on Alpine Linux systems

Version 10.6p2 of OpenSSH has been released with a workaround for a critical security vulnerability affecting Linux systems that use musl libc with PAM disabled, such as Alpine Linux. Developer Damien Miller advises administrators of such systems to immediately set PasswordAuthentication=no or disable SSH. The vulnerability does not impact non-Linux systems, Linux systems using glibc, or Linux systems utilizing PAM for password authentication. Open article →