ALPINE LINUX SECURITY ADVISORY: OPENSSH-SERVER PASSWORD AUTHENTICATION BYPASS

Summary from the TLDR DevOps newsletter

A vulnerability in Alpine Linux's openssh-server package allows attackers to bypass password authentication and log in without knowing any password. The flaw affects releases 3.16 through 3.24 and allows remote access if the system has an account with no password set. Users should update openssh and restart sshd or disable password logins immediately.