GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE
  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    lainy (lain@lain.com)'s status on Monday, 29-May-2023 18:28:25 JSTlainylainy
    • anime graf mays ?️?
    • Alex Gleason
    PLEROMA ADMINS READ THIS, AKKOMA TOO

    Another important pleroma security post: @alex and @graf found ANOTHER injection bug, and this one was probably used for the attack. I think that single user instances are probably not affected, but I wouldn't want to risk it. Move your media and proxy to a subdomain as alex initially recommended, it's not complicated and takes 15 minutes, and eliminates this whole class of bugs.

    Fix is being worked on, but just do the media/proxy thing now so you'll never have to worry about this again.

    https://webb.spiderden.org/2023/05/26/pleroma-mitigation/
    In conversationMonday, 29-May-2023 18:28:25 JST from lain.compermalink

    Attachments

    1. No result found on File_thumbnail lookup.
      Mitigating the recent Pleroma issues
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.