Dash · 2026-11-05 15:02 UTC

A nice new vulnerability, Core and Platform are *not* affected by this, even if run through Dashmate - while we do use Alpine base there is no openssh installation. Anyone running shared masternode services or similar should check to ensure Alpine images (most Docker images) are *not* running openssh, and if they are please update your systems as a matter of urgency *sshole · sshhole.com openssh on musl linux has been letting people into password-less accounts since 2016.

Loading the story on Tree News…