Results for “Alpine Linux”

2 stories found

OpenSSH 'sshole' bug lets anyone log into passwordless accounts on Alpine Linux: patch CVE-2026-123158 now

A logic flaw in how OpenSSH checks passwords on musl-based systems lets an attacker log into accounts that have no password by sending a very long one. OpenSSH 10.6p2 and Alpine's backported packages fix it; anyone running sshd on Alpine hosts or containers should update or switch off password logins today.

3h ago · 3 min read

Security

GitLab's CVSS 10 regex bug is now exploited in the wild. Upgrading GitLab may not be enough — check your Ruby

CISA has added CVE-2026-97229 to its exploited-vulnerabilities list after an attack on Alpine Linux's GitLab server. The flaw lives in Ruby's regex engine, so self-built and custom GitLab images can stay vulnerable even on a "fixed" version number.

3d ago · 3 min read