51
Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities (github.com)
submitted 1 day ago by to c/selfhosted@lemmy.world
3 comments fedilink hide all child comments
 

While you should probably take some services offline altogether, FreshRSS has an update out.

Just one of many updates that we're going to be seeing over the next few hours / days.

For those who haven't seen it yet

https://therecord.media/php-script-vulnerabilities-warnings

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 21 hours ago

The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP.

  • permalink
  • fedilink
  • source
  • parent