Menu

#OpenSsh

15 posts

Feed·
14 of 15 posts
CISA Adds OpenSSH SSHole and Three Critical Flaws to the KEV Catalog as Exploitation Continues
📰
0Read More

CISA Adds OpenSSH SSHole and Three Critical Flaws to the KEV Catalog as Exploitation Continues

DEV Community: infosec·Shar z·about 5 hours ago
#Chf1njNG
#devtoinfosec#devto#dev#november#password

Shar z Security Engineer, Nine-Security 10 November 2026 (UTC+8) On some Linux systems, a password...

15s
The OpenSSH sshole Vulnerability: Two Different Kinds of 'No Match' Accidentally Matched
📰
0Read More

The OpenSSH sshole Vulnerability: Two Different Kinds of 'No Match' Accidentally Matched

DEV Community: cloud·Rohit Bhadani·4 days ago
#1utq6cwH
#devtocloud#devto#dev#password#openssh

The OpenSSH sshole vulnerability, CVE-2026-123158, lets a long password log into passwordless Alpine Linux accounts. Attackers exploited it within nine hours.

15s
OpenSSH 10.6p2 Fixes Critical Alpine Linux Flaw: Passwords of 257 to 1,024 Bytes Unlock Passwordless Accounts
📰
0Read More

OpenSSH 10.6p2 Fixes Critical Alpine Linux Flaw: Passwords of 257 to 1,024 Bytes Unlock Passwordless Accounts

DEV Community: infosec·Etairos.ai·4 days ago
#E2pPHzHs
#devtoinfosec#devto#dev#alpine#password

TL;DR what: OpenSSH disclosed a critical flaw where sshd built without PAM on musl-based...

15s
0Read More

OpenSSH Flaw Lets Attackers Log Into Password-Disabled Linux Accounts - Slashdot

#slashdot#it#password#openssh#accounts

A newly disclosed OpenSSH flaw dubbed "*sshole" can allow attackers to log in to password-disabled accounts on certain musl-based Linux systems simply by submitting a password longer than 256 bytes.…

15s
Combined flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password — emergency fixes for OpenSSH and musl-libc issued for millions of systems, patch immediately
🖼️
0Read More

Combined flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password — emergency fixes for OpenSSH and musl-libc issued for millions of systems, patch immediately

#tomshardware#password#openwrt#linux#distros

Combined OpenSSH and musl-libc flaws let anyone into Alpine Linux and other distros by typing anything over 256 characters as a password — emergency fixes issued for millions of systems, patch immediately

15s
Why I close SSH port 22 entirely (and what I use instead)
🖼️
0Read More

Why I close SSH port 22 entirely (and what I use instead)

Hacker News·3 months ago
#zmPd4NiB
#michelebologna#ssh#fwknop#openssh#article

fail2ban and key-only auth are not enough. fwknop Single Packet Authorization keeps port 22 closed at the firewall, opens it for your IP for a few seconds, then closes it again.

15s
Rocky Linux 9.8 Locks Down Enterprise Linux Fleets
🖼️
0Read More

Rocky Linux 9.8 Locks Down Enterprise Linux Fleets

DEV Community: cybersecurity·MLXIO·6 months ago
#0cGd4alR
#dev#rocky#linux#cloud#support

Rocky Linux 9.8 widens hardware and cloud support while adding OpenSSH 9.9, GnuTLS 3.8.10 and admin-focused tooling.

15s