Conversation

Notices

1. Embed this notice
   Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 18-Apr-2025 07:03:04 JST Haelwenn /элвэн/ :triskell:
   Yikes, patch your #Erlang if you've SSH on it (like with Pleroma BBS).
   
   https://github.com/erlang/otp/security/advisories/GHSA-37cp-fgq5-7wc2 - CVE-2025-32433
   • narcolepsy and alcoholism :flag: and Fish of Rage like this.
   • Embed this notice
     feld (feld@friedcheese.us)'s status on Friday, 18-Apr-2025 07:04:10 JST feld

     in reply to
     @lanodan good thing almost nobody uses that joke feature lol
     Haelwenn /элвэн/ :triskell: likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 18-Apr-2025 07:06:21 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • feld
     @feld Yeah and IIRC we tossed it out in favor of a dedicated client which does the same thing (thus allowing priv-sep, making the vuln a lot less problematic with a bit of hardening in place).
     
     But well some people are really slow at updating their installs.
     feld likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Friday, 18-Apr-2025 07:10:23 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • feld
     @feld Yup, removed 2 years ago almost day-for-day https://git.pleroma.social/pleroma/pleroma/-/merge_requests/3872 so no security release to be done on our side for OTP-binaries/Docker.
     feld likes this.
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 19-Apr-2025 00:39:39 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
     @jeffcliff As if I would be responsible for any of it.
   • Embed this notice
     Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧 (jeffcliff@shitposter.world)'s status on Saturday, 19-Apr-2025 00:39:40 JST Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧

     in reply to
     @lanodan STOP USING GITHUB
     
     critical security updates should NOT BE GITHUB-ONLY
   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 19-Apr-2025 00:45:33 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧
     @jeffcliff lol, plonk.
   • Embed this notice
     Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧 (jeffcliff@shitposter.world)'s status on Saturday, 19-Apr-2025 00:45:34 JST Jeff "never puts away anything, especially oven mitts" Cliff, Bringer of Nightmares 🏴‍☠️🦝🐙 🇱🇧🧯 🇨🇦🐧

     in reply to
     @lanodan you are responsible for what YOU post and YOU just posted a github link
     翠星石 likes this.