Discussion
so what has broken the internet today?
1. php
2. node.js
3. gitlab
4. 4
5. musl
6. QUIC/HTTP/3
7. Signal
8. Apache Traffic Server
9. Pillow for Python, even!
10. bind
11. LiteLLM
12. XZ Utils
13. Bind
(Java is reported, but supposedly it's just their version of the 4 issue)
anything else I'm missing?
and apparently Railray (a cloud provider?) got hacked and are telling all their customers to rotate their secrets. Apparently things like API keys were stolen
@foone i can't find the thing about musl
@foone@digipres.club also what happened with musl??
@xeno integer overflow in regcomp():
@foone what happened to signal??
@NatGrayYes I think that one is just 4, but Oracle got their own CVE for it
@foone Hello friends, I urgently need your help. I need £200 to provide for my child's special needs, including milk and diapers. Please donate and share the link. 🙏🙏🍉😭
https://chuffed.org/project/208485-give-waleeds-family-a-chance-to-live
@foone apparently, Java and Fortinet? (Impending)
plex and gitlab as well i think? ive hears apache as well but i havent done the work to look into that more, though that could also go for plex and gitlab
@swirly I thought plex was just them firing all their staff?
Install Fedizen
Get the full app experience
@foone LiteLLM
https://come-from.mad-scientist.club/@algernon/statuses/01M5GCJQG5JJ4TG4S1NMC2C01S
> Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor