How bad is it? As bad as it can get. Alpine Linux explained in its security advisory that if an attacker can reach a ...

Only a small, niche number of distros, though.

Any password over 256 bytes can unlock key-only accounts on musl systems without PAM. OpenSSH shipped 10.6p2 a day after ...

Attackers are exploiting CVE-2026-123158 in OpenSSH, with root access confirmed on an Alpine Linux honeypot. OpenSSH 10.6p2 ...

I do not think this is the answer, but I spent time investigating it because I thought it might be a clue to the factors ...

A bug dubbed "*sshole" lets attackers log into passwordless accounts on musl-based Linux distributions using a password ...

Alpine Docker downloads highlight an SSH flaw that can let attackers log in with long passwords. Read which systems need ...

Binance founder CZ warns of a critical OpenSSH authentication flaw affecting Alpine Linux servers as developers release ...

Alpine has patched an OpenSSH authentication bypass that can affect key-only accounts under certain conditions. Here is why ...

A decade-old sshole vulnerability in some Alpine Linux configurations may allow passwordless SSH login under specific ...

OpenSSH 10.6p2 fixes a critical password bypass allowing access to key-only accounts on affected Alpine Linux servers using ...

Devices running some configurations of Alpine Linux, and possibly other distributions, are affected by a decade-old ...