Skip to content
Sign in
Artwork for Breach Please
Breach Please · Friday · 34 min

S0:E68: Alpine's SSH 'Starshole' Bug and Rails' SVG Code-Execution Flaw w/ Richy

Jake is on the beach in Miami and Richy's filling in for Jess again - and they're digging into two vulnerabilities that actually matter this week. First: OpenSSH's emergency patch for an SSH authentication bypass in Alpine Linux's sshd, nicknamed "Starshole." It takes four separate misconfigurations lining up before it's exploitable - Jake and Richy break down why that makes it more of a fire-drill-worthy test of your container resilience than a five-alarm fire, and why embedded/OpenWRT-based appliances are the bigger worry than enterprise containers. Then: a 9.8-severity flaw in Ruby on Rails + ImageMagick that lets a malicious SVG file upload turn into remote code execution - because an SVG isn't really an image, it's a set of drawing instructions (and ImageMagick's MSL scripting language can be hijacked). They talk through why allow-listing file types, not block-listing, should have caught this from the start. Plus: budgeting-season war stories (bronze/silver/gold package tricks), and why Jake thinks "vulnerability prioritization" needs to become "vulnerability operations." Sources: The Hacker News (OpenSSH "Starshole" Alpine sshd bypass): https://thehackernews.com/2026/11/openssh-issues-emergency-fix-for-flaw.html?m=1 The Hacker News (Rails + ImageMagick SVG upload RCE): https://thehackernews.com/2026/11/critical-rails-flaw-lets-attackers.html Join the conversation on Discord: https://discord.gg/wYJnTpczV #cybersecurity #vulnerabilitymanagement #infosec #openssh #rubyonrails

0:00-34:57
Play in

transcript

No transcript — this publisher did not publish one.

show notes

Jake is on the beach in Miami and Richy's filling in for Jess again - and they're digging into two vulnerabilities that actually matter this week. First: OpenSSH's emergency patch for an SSH authentication bypass in Alpine Linux's sshd, nicknamed "Starshole." It takes four separate misconfigurations lining up before it's exploitable - Jake and Richy break down why that makes it more of a fire-drill-worthy test of your container resilience than a five-alarm fire, and why embedded/OpenWRT-based appliances are the bigger worry than enterprise containers. Then: a 9.8-severity flaw in Ruby on Rails + ImageMagick that lets a malicious SVG file upload turn into remote code execution - because an SVG isn't really an image, it's a set of drawing instructions (and ImageMagick's MSL scripting language can be hijacked). They talk through why allow-listing file types, not block-listing, should have caught this from the start. Plus: budgeting-season war stories (bronze/silver/gold package tricks), and why Jake thinks "vulnerability prioritization" needs to become "vulnerability operations."

Sources:

The Hacker News (OpenSSH "Starshole" Alpine sshd bypass): https://thehackernews.com/2026/11/openssh-issues-emergency-fix-for-flaw.html?m=1

The Hacker News (Rails + ImageMagick SVG upload RCE): https://thehackernews.com/2026/11/critical-rails-flaw-lets-attackers.html

Join the conversation on Discord: https://discord.gg/wYJnTpczV

#cybersecurity #vulnerabilitymanagement #infosec #openssh #rubyonrails

more episodes

All episodes