Binance founder Changpeng Zhao warned on X on November 6 that a critical OpenSSH vulnerability on Alpine Linux has existed for 10 years and urged users to apply fixes immediately. According to Zhao's repost, OpenSSH released an emergency patch addressing a severe SSH authentication bypass flaw. On affected servers, passwords exceeding 256 bytes can unlock key-only login accounts without knowing actual credentials.
Zhao emphasized the urgency of applying the patch to prevent unauthorized access.