OpenSSH security advisory
> this vulnerability might permit code execution with the privileges of the authenticated userYet another vote for secure authentication, which typically means requiring use of a private key and disabling root login.