OpenSSH flaw allows login to Linux accounts with password authentication disabled

A flaw in OpenSSH and musl, dubbed “sshole,” may under certain conditions allow an attacker to log in to a Linux user account whose password hash has been replaced with an asterisk (*) in /etc/shadow.