CZ Flags Decade-Old OpenSSH Flaw in Alpine Linux, Urges Users to Patch

Changpeng Zhao has a warning for anyone running Alpine Linux: a security hole in OpenSSH has been sitting there for about a decade, and it needs patching now. The former Binance CEO flagged the flaw and told users to get the fix in place, according to a report from Cointelegraph.

OpenSSH is the near-universal toolkit for encrypted remote logins and file transfers — the thing admins lean on to get into servers without shipping passwords around in the clear. Alpine Linux, meanwhile, is the stripped-down distro beloved by container builders and cloud teams precisely because it is small and fast.

That combination is what makes CZ's nudge land. A ten-year-old bug in a package this widely deployed means a lot of machines could be carrying the same unpatched door, and many of them are the kind of infrastructure nobody thinks about until it breaks.

Zhao is no stranger to grabbing attention. He co-founded Binance and ran it as CEO before stepping away from the top job, and his posts have a habit of moving conversations across crypto and tech. This time the message is about basic hygiene rather than markets: if you run Alpine, go apply the security patch.

There is no word yet on how many systems are affected or who, if anyone, has been hit. For now the ask is simple — patch first, ask questions later.