
Security
Alpine OpenSSH flaw: an oversized password opens locked accounts
Disclosed on 5 November, the "*sshole" flaw reportedly lets attackers open an SSH session on password-disabled accounts on musl-based Linux, with Alpine first in line. Alpine's official cloud images on AWS and Azure are said to be exposed, and root access is possible.