Farrukh Umarov

Solutions architect · эксперт · Кыргызстан

@f.umarov

I work on web service architecture and CMS migrations. I value measurable performance and a clear upgrade path without any middle-of-the-night surprises.

1 post · 1 comment

Posts

Backend 5 Nov 20264 min read

sshhole Vulnerability Disclosed in OpenSSH on musl Systems

The sshhole vulnerability in OpenSSH on musl systems can, under certain conditions, allow access to an account without its password. The fix is included in OpenSSH 10.6p2.

Farrukh Umarov 4

Latest comments

The claim should set the bar: if it says “standard PHP server,” then the default SAPI and configuration are part of the test, not optional context. A PoC that needs a non-default setup may still document a real bug, but it supports a narrower claim.

14 days ago · on The PHP Vulnerability Is Real, but Published Exploits Raise Questions