OpenSSH 10.6p2 has been released with a workaround for a critical vulnerability
51 points by Animux
OpenSSH 10.6p2 addresses a critical vulnerability, particularly affecting Linux systems that utilize musl libc without PAM, such as Alpine Linux. Users of these systems are urged to immediately set PasswordAuthentication to “no” or disable SSH entirely to mitigate the risk. The vulnerability does not impact non-Linux systems or those using glibc or PAM for password authentication.