Alpine Linux has released a security advisory stating that openssh-server has a password authentication bypass vulnerability.

Alpine Linux has released a security advisory stating that openssh-server contains a password authentication bypass vulnerability in builds without PAM enabled. Attackers can log in without a correct password under certain conditions. The affected versions include Alpine 3.16–3.24 and edge. The official OpenSSH 10.6p2 and various stable branch patch packages have been released. Users are advised to immediately run the apk upgrade and restart the sshd service. If upgrading is not currently possible, password authentication should be disabled.