Hey, guys.
Pre-workday-Netto chiming in to inform you that a XSS vulnerability has been found in Lemmy’s frontend and that several instances have been compromised.
You can track the issue here.
I implemented the supposed patch and uploaded an ARM64 build that has the patch applied to Docker Hub, if any other instance might need it (use with caution).
Please note that you’ll have to log back in, as all active sessions have been terminated.
I’ll continue to monitor the situation when I’m at work.
✌️
If you guys experience short “bursts” of downtime: I’m doing some security hardening in the background. In the future, I’ll spin up a test instance for these things.
I’m thinking about a status page for FOSSWare. I have a VPS on Linode (in DE zone). If FOSSWare isn’t hosted on Linode, I can setup a static site that I will be pulling from a repo of your choice. So, this will be a page that is being maintained on a different provider by a different person. What do you think? It could be served as is or as a Cloudflare static site. However, I would rather try depending on as few providers as possible for it.
Good idea and thank you. However, you just caught me in the act of setting up a status monitor on another VPS I run at a different provider. Will be up in a couple
minuteshours (something else just came in).That’s great. A static page where you can post a short message in case of an outage would be nice to have as well.
On the second thought, something like a Codeberg/Gitlab/Github static page would be just enough:)
