OpenSSH security advisory
> <i>this vulnerability might permit code execution with the privileges of the authenticated user</i><p>Yet another vote for secure authentication, which typically means requiring use of a private key and disabling root login.