S0:E68: Alpine's SSH 'Starshole' Bug and Rails' SVG Code-Execution Flaw w/ Richy
Jake is on the beach in Miami and Richy's filling in for Jess again - and they're digging into two vulnerabilities that actually matter this week. First: OpenSSH's emergency patch for an SSH authentication bypass in Alpine Linux's sshd, nicknamed "Starshole." It takes four separate misconfigurations lining up before it's exploitable - Jake and Richy break down why that makes it more of a fire-drill-worthy test of your container resilience than a five-alarm fire, and why embedded/OpenWRT-based appliances are the bigger worry than enterprise containers. Then: a 9.8-severity flaw in Ruby on…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.