sshhole (CVE-2026-123158): The OpenSSH Bug That Logs Into Alpine Without a Password, and How to Fix It

A musl quirk makes OpenSSH accept a too-long password for passwordless accounts on Alpine Linux and many Docker images. Ubuntu and Debian are safe. Who is affected, a 10-second check, and the two-command fix.

Read more →

The GitLab 10/10 Flaw (CVE-2026-97229, GitLab2Shell): Why Updating GitLab Might Not Be Enough

One crafted regular expression in a CI/CD config can run code on a self-hosted GitLab server, no login needed. Alpine Linux updated and was still vulnerable. How to check, upgrade and verify.

Read more →