Or at least disable password auth on sshd
That does not seem to be a good idea:
"A newly disclosed OpenSSH vulnerability dubbed "*sshole" lets attackers log in to Alpine Linux and other musl-based systems whose accounts are configured to block password authentication by submitting an oversized password, BleepingComputer reported.
Password-disabled accounts are standard hardening for root and service access, so the flaw turns a default lockdown into an entry point on affected hosts"
"A newly disclosed OpenSSH vulnerability dubbed "*sshole" lets attackers log in to Alpine Linux and other musl-based systems whose accounts are configured to block password authentication by submitting an oversized password, BleepingComputer reported.
Password-disabled accounts are standard hardening for root and service access, so the flaw turns a default lockdown into an entry point on affected hosts"