Topic
Linux
Alpine's *sshole Flaw Needs Four Conditions; Check Them, Then Restart sshd
A no-password account can open for any password over 256 bytes, but only on musl systems without PAM where a neighbour has a real hash. Here is the per-host triage, the patched versions and the restart that makes the fix real.