Changpeng Zhao: Alpine Linux OpenSSH Vulnerability Has Existed for 10 Years; Apply Fixes Promptly

Nov. 6: Changpeng Zhao warned in a post on X that the OpenSSH security vulnerability in Alpine Linux has existed for 10 years, and that users should apply the fix as soon as possible if it has not yet been patched.

According to the post he reposted, OpenSSH released an emergency fix for a severe SSH authentication bypass vulnerability on Alpine Linux. On affected servers, passwords longer than 256 bytes can unlock accounts restricted to key-only login without knowing the actual credentials.