{
  "id": 18323736,
  "title": "Alpine Linux Security advisory: OpenSSH-server password authentication bypass",
  "url": "https://urgent.news/2026/11/05/alpine-linux-security-advisory-openssh-server-password-authentication",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-05T14:44:20.000Z",
  "source": {
    "name": "Hacker News",
    "slug": "hacker-news",
    "url": "https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/"
  },
  "original_language": "en",
  "account": "Alpine Linux users of the sshd server are urged to update the openssh package immediately to prevent a security vulnerability that allows attackers to bypass password authentication. By sending a lengthy password, an attacker can gain unauthorized access to an account with no password set. This issue affects all Alpine releases from 3.21 through 3.24 and edge, as well as older releases up to 3.20. To mitigate the risk, disable password logins by setting PasswordAuthentication no in the sshd configuration or upgrade to the fixed package version. After upgrading, restart the sshd daemon to apply the changes.",
  "summary": null,
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 2,
    "also_reported_by": [
      {
        "outlet": "LWN",
        "title": "Critical security vulnerability affects OpenSSH on Alpine Linux systems",
        "url": "https://urgent.news/2026/11/05/critical-security-vulnerability-affects-openssh-on-alpine-linux",
        "published": "2026-11-05T11:39:10.000Z"
      }
    ]
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}