Discussion
so what has broken the internet today?
1. php
2. node.js
3. gitlab
4. 4
5. musl
6. QUIC/HTTP/3
7. Signal
8. Apache Traffic Server
9. Pillow for Python, even!
10. bind
11. LiteLLM
12. XZ Utils
13. Bind
(Java is reported, but supposedly it's just their version of the 4 issue)
anything else I'm missing?
and apparently Railray (a cloud provider?) got hacked and are telling all their customers to rotate their secrets. Apparently things like API keys were stolen
@foone what's the thing with 4 ? Is it an obscure meme I missed?
@foone LiteLLM
https://come-from.mad-scientist.club/@algernon/statuses/01M5GCJQG5JJ4TG4S1NMC2C01S
> Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
@foone i can't find the thing about musl
@foone@digipres.club also what happened with musl??
@xeno integer overflow in regcomp():
@foone what happened to signal??
@NatGrayYes I think that one is just 4, but Oracle got their own CVE for it
@foone Hello friends, I urgently need your help. I need £200 to provide for my child's special needs, including milk and diapers. Please donate and share the link. 🙏🙏🍉😭
https://chuffed.org/project/208485-give-waleeds-family-a-chance-to-live
@foone apparently, Java and Fortinet? (Impending)
plex and gitlab as well i think? ive hears apache as well but i havent done the work to look into that more, though that could also go for plex and gitlab
@swirly I thought plex was just them firing all their staff?
Install Fedizen
Get the full app experience
also it's not TODAY (it seems it started up to two days ago) but there's an active plex vulnerability out there (Plex2Shell), so unpatched plex installations are being remotely hacked to host cryptominers, ddos remotes and such. Fun!