Received: from ncopa-desktop.lan (unknown [IPv6:2001:4646:fb05:0:2c3d:f227:deab:c564])
	(Authenticated sender: ncopa@alpinelinux.org)
	by gbr-app-1.alpinelinux.org (Postfix) with ESMTPSA id 2E8AC21FBF3
	for <~alpine/announce@lists.alpinelinux.org>; Thu,  5 Nov 2026 15:18:50 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=alpinelinux.org;
	s=smtp; t=1793891930;
	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
	 to:to:cc:mime-version:mime-version:content-type:content-type:
	 content-transfer-encoding:content-transfer-encoding;
	bh=vDpw4TsmuqVQPuapDMd7R6QlmTMf+JVqp2SgB0RpDHY=;
	b=C5IQpkInyex+WA1VRqDb1/WmkGYall5KJCuLdOLyNKVIGI/DrYwpDd4CxWvI0Z50h3xaKu
	TEfbpX1YngFMTxE787iorJg4kbxGxsdGkMUV8EquSq7ugIWyHLbFUPP/G+lQSD8A5i1ji/
	ZJZofolHWNiozLuMHEzCnxFLJbw7q/c=
Date: Thu, 5 Nov 2026 16:18:47 +0100
From: Natanael Copa <ncopa@alpinelinux.org>
To: ~alpine/announce@lists.alpinelinux.org
Subject: Security advisory: openssh-server password authentication bypass
Message-ID: <20261105161847.39211211@ncopa-desktop.lan>
X-Mailer: Claws Mail 4.4.0 (GTK 3.24.52; x86_64-alpine-linux-musl)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

Hi,

Please ensure you have updated OpenSSH or disabled password logins for sshd.
https://alpinelinux.org/posts/2026-11-05-openssh-password-authentication-bypass/

-nc