*SSHOLE

Summary from the TLDR Dev newsletter

A password authentication bypass in OpenSSH on musl systems without PAM can let specially configured accounts accept long passwords because musl's crypt() failure marker matches the account's stored password field.