so, a list of critical security updates you need to install so far, for today:
- PHP
- Node.js
- Gitlab
- GoToSocial
- Signal
- Anything that needs a TLS CA store update
is there something in the water today??
0 Boosts
0 Likes
Haelwenn /элвэн/ :triskell:
@lanodan@queer.hacktivis.me
·
activity timestamp
33 min. ago
@joepie91 slop, slop is in the water
@joepie91 don't forget the new apache rce that just dropped
@ShadowJonathan @joepie91 Also brotli, which like not direct RCE but pretty close as it's used for network compression: https://github.com/google/brotli/releases/tag/v1.2.1
@lanodan @joepie91 @ShadowJonathan isn't that the node one?
@Yuvalne @joepie91 @ShadowJonathan Yeah, NodeJS probably vendors it…
Thankfully quite few distros tend to de-vendor hard.
Thankfully quite few distros tend to de-vendor hard.
@lanodan@queer.hacktivis.me @ShadowJonathan@tech.lgbt @joepie91@fedi.slightly.tech and gitlab
