TREE NEWS update: OpenSSH has shipped an urgent workaround for a password bypass flaw affecting Alpine Linux, warning that key-only accounts can be exposed if SSH password authentication remains enabled. Alpine is urging operators to update and restart the server process.
OpenSSH Issues Urgent Workaround for Alpine Password Bypass
The exposure is narrower than a generic SSH flaw: accounts configured for key-only access are the ones at risk when password authentication is still switched on, which points to configuration drift rather than a broken default. That makes this an operations problem as much as a patching one, since the workaround only helps once the server process is actually restarted. Alpine's lightweight footprint in containers and edge deployments is what gives this outsized reach. Whether operators treat the restart as routine or defer it through change-control cycles is the open question.
Generated by AI for reference only.
Share on WeChat
Open WeChat → Scan → then tap "…" to send to a chat or Moments.
Tap "…" in the top-right corner to send to a chat or share to Moments.