"sshole" flaw in OpenSSH: an overly long password could unlock disabled accounts
A researcher has described a bug in OpenSSH on systems using the musl library, including Alpine Linux and OpenWrt. A password over 256 characters could open accounts meant to block password login. A fix is available.