OpenSSH flaw bypasses password-disabled account protection

A vulnerability in OpenSSH, dubbed "*sshole", allows unauthenticated attackers to log into Alpine Linux and other musl-based systems configured to block password authentication. The flaw is triggered by submitting an oversized password that bypasses the account's security settings. System administrators should update OpenSSH and review authentication configurations on affected systems.