2026-11-05 If you run sshd on Alpine Linux, update openssh now and restart sshd. Upgrading the package alone does not replace the running daemon. If you cannot update yet, at least disable password logins: set PasswordAuthentication no in your sshd configuration and restart sshd. Either one closes the hole. What is the problem? An attacker who can reach your SSH port can log in without knowing any password. It takes one connection, works every time, and needs no retries. The attacker needs the n...