I had a feeling SSHhole would be exploited... just not in 24h 🤣
November 6, 2026 at 6:46 PM
I had a feeling SSHhole would be exploited... just not in 24h 🤣
the worst thing about sshhole is this thing they put at the end of the """disclosure"""
sshhole.com
November 5, 2026 at 4:30 PM
the worst thing about sshhole is this thing they put at the end of the """disclosure"""
Me dealing with the sshhole thing today
Everyday now there’s a post from Cybersecurity folks like: they found a blorn hole in jstoc. If you use Wham_friend to write your chonker drops your quartz line is probably fucked (cobalt appears to be fine, but only if written in poob). Anyway, that’s why every hospital in the Denver area is closed
November 6, 2026 at 2:48 AM
Me dealing with the sshhole thing today
sshhole
sshhole.com
November 5, 2026 at 12:25 PM
Best bit is talking about *sshhole is triggering the profanity filters in corporate chats
November 5, 2026 at 8:25 PM
Best bit is talking about *sshhole is triggering the profanity filters in corporate chats
sshhole is not actually a big deal
November 5, 2026 at 2:06 PM
sshhole is not actually a big deal
https://blog.gslin.org/archives/2026/11/05/13329/sshhole-musl-%e7%92%b0%e5%a2%83/
sshhole (musl 環境)
#advisory #length #library #linux #musl #openssh #password #security #ssh #vulnerability
sshhole (musl 環境)
#advisory #length #library #linux #musl #openssh #password #security #ssh #vulnerability
Gea-Suan Lin (@gslin@abpe.org)
https://blog.gslin.org/archives/2026/11/05/13329/sshhole-musl-%e7%92%b0%e5%a2%83/
sshhole (musl 環境)
#advisory #length #library #linux #musl #openssh #password #security #ssh #vulnerability
abpe.org
November 5, 2026 at 2:02 PM
https://blog.gslin.org/archives/2026/11/05/13329/sshhole-musl-%e7%92%b0%e5%a2%83/
sshhole (musl 環境)
#advisory #length #library #linux #musl #openssh #password #security #ssh #vulnerability
sshhole (musl 環境)
#advisory #length #library #linux #musl #openssh #password #security #ssh #vulnerability
alpine’s own advisory is a model of clarity. that sshhole page is an embarrassment
November 6, 2026 at 10:48 PM
alpine’s own advisory is a model of clarity. that sshhole page is an embarrassment
November 5, 2026 at 2:47 PM
#sshhole is a thing of beauty.
From the #solaris login style #vulnerability to the #ssh timing leak it has all I cherish and love about #security research 👏
https://sshhole.com/
From the #solaris login style #vulnerability to the #ssh timing leak it has all I cherish and love about #security research 👏
https://sshhole.com/
November 5, 2026 at 3:04 PM
#sshhole is a thing of beauty.
From the #solaris login style #vulnerability to the #ssh timing leak it has all I cherish and love about #security research 👏
https://sshhole.com/
From the #solaris login style #vulnerability to the #ssh timing leak it has all I cherish and love about #security research 👏
https://sshhole.com/
not a typo, I really meant lololololololololololololol.
also really meant sshhole with no a and two h's.
also really meant sshhole with no a and two h's.
November 6, 2026 at 12:07 AM
not a typo, I really meant lololololololololololololol.
also really meant sshhole with no a and two h's.
also really meant sshhole with no a and two h's.
this isn't a dig at anyone or anything in particular, just the industry but...
lololololololololololololol
also, have you seen sshhole
lololololololololololololol
also, have you seen sshhole
November 6, 2026 at 12:03 AM
this isn't a dig at anyone or anything in particular, just the industry but...
lololololololololololololol
also, have you seen sshhole
lololololololololololololol
also, have you seen sshhole
#security #SSHHole ermöglicht es ein beliebiges super langes Passwort (größer 257 Zeichen) einzugeben, um unter bestimmten #Linux-Versionen #Root zu bekommen (auch für Konten, die keine Anmeldung vorsehen):
borncity.com/blog/2026/11...
borncity.com/blog/2026/11...
Sicherheits-Gau: SSHHole (CVE-2026-123158) ermöglicht Root-Zugriff durch lange Zeichenkette
Gerade glaubst Du, php2shell & Co. sowie die Angriffe auf die Kühlketten / IoT-Systemen hinter dir gelassen zu haben, schießt eine neue Sicherheitslücke um die nächste Ecke. Bei OpenSSH reicht es…
borncity.com
November 6, 2026 at 9:53 AM
#security #SSHHole ermöglicht es ein beliebiges super langes Passwort (größer 257 Zeichen) einzugeben, um unter bestimmten #Linux-Versionen #Root zu bekommen (auch für Konten, die keine Anmeldung vorsehen):
borncity.com/blog/2026/11...
borncity.com/blog/2026/11...
November 6, 2026 at 8:11 PM
.... "Sshhole"? Seriously? Someone's going to rule 34 this.
November 6, 2026 at 1:31 PM
.... "Sshhole"? Seriously? Someone's going to rule 34 this.
sshhole
openssh on musl linux has been letting people into password-less accounts since 2016.
sshhole.com
November 5, 2026 at 12:54 PM
🐧 **BSD: No sshhole for DragonFly, OpenBSD, and NetBSD Picks**
BSD leftovers
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/07/BSD_No_sshhole_for_DragonFly_OpenBSD_and_NetBSD_Picks.shtml
BSD leftovers
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/07/BSD_No_sshhole_for_DragonFly_OpenBSD_and_NetBSD_Picks.shtml
Tux Machines — BSD: No sshhole for DragonFly, OpenBSD, and NetBSD Picks
news.tuxmachines.org
November 7, 2026 at 3:35 PM
🐧 **BSD: No sshhole for DragonFly, OpenBSD, and NetBSD Picks**
BSD leftovers
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/07/BSD_No_sshhole_for_DragonFly_OpenBSD_and_NetBSD_Picks.shtml
BSD leftovers
📰 Source: Tux Machines
🔗 Link: https://tuxmachines.org/n/2026/11/07/BSD_No_sshhole_for_DragonFly_OpenBSD_and_NetBSD_Picks.shtml
SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168
https://isc.sans.edu/podcastdetail/10168
November 6, 2026 at 2:00 AM
SANS Stormcast Friday, November 6th, 2026: RootEvidence Cisco IOS Opt-Out Scans; OpenSSH musl sshhole (CVE-2026-123158); Refrigeration OT Hardening; Zyxel GS1900 OOB Write (CVE-2026-107441)
https://isc.sans.edu/podcastdetail/10168
https://isc.sans.edu/podcastdetail/10168
OpenSSHに認証バイパス脆弱性「*sshole（CVE-2026-123158）」 Alpine Linuxでパスワード不要のSSHログイン、root権限奪取のおそれ|セキュリティニュースのセキュリティ対策Lab
https://rocket-boys.co.jp/security-measures-lab/openssh-sshhole-cve-2026-123158-alpine-authentication-bypass/
https://rocket-boys.co.jp/security-measures-lab/openssh-sshhole-cve-2026-123158-alpine-authentication-bypass/
OpenSSHに認証バイパス脆弱性「*sshole（CVE-2026-123158）」 Alpine Linuxでパスワード不要のSSHログイン、root権限奪取のおそれ|セキュリティニュースのセキュリティ対策Lab
rocket-boys.co.jp
November 6, 2026 at 3:33 AM
OpenSSHに認証バイパス脆弱性「*sshole（CVE-2026-123158）」 Alpine Linuxでパスワード不要のSSHログイン、root権限奪取のおそれ|セキュリティニュースのセキュリティ対策Lab
https://rocket-boys.co.jp/security-measures-lab/openssh-sshhole-cve-2026-123158-alpine-authentication-bypass/
https://rocket-boys.co.jp/security-measures-lab/openssh-sshhole-cve-2026-123158-alpine-authentication-bypass/
⚠️ Redpanda is reporting an Incident since 17:57 UTC
"Redpanda Engineering investigating SSHHole vulnerability."
Live timeline → https://pingoru.io/providers/redpanda/incidents/12471999
#Redpanda #RedpandaDown
"Redpanda Engineering investigating SSHHole vulnerability."
Live timeline → https://pingoru.io/providers/redpanda/incidents/12471999
#Redpanda #RedpandaDown
Redpanda: Redpanda Engineering investigating SSHHole vulnerability. · November 5, 2026 · Pingoru
Redpanda incident on November 5, 2026: Redpanda Engineering is investigating our products to see if we are impacted by the reported SSHHole vulnerability. We plan to update this p Started 5:57 PM UTC, resolved ongoing (● 6m).
pingoru.io
November 5, 2026 at 6:03 PM
⚠️ Redpanda is reporting an Incident since 17:57 UTC
"Redpanda Engineering investigating SSHHole vulnerability."
Live timeline → https://pingoru.io/providers/redpanda/incidents/12471999
#Redpanda #RedpandaDown
"Redpanda Engineering investigating SSHHole vulnerability."
Live timeline → https://pingoru.io/providers/redpanda/incidents/12471999
#Redpanda #RedpandaDown