▲ 51 ▼ Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities (github.com) submitted 23 hours ago by otter@lemmy.ca to c/selfhosted@lemmy.world 3 comments fedilink hide all child comments While you should probably take some services offline altogether, FreshRSS has an update out. Just one of many updates that we're going to be seeing over the next few hours / days. For those who haven't seen it yet https://therecord.media/php-script-vulnerabilities-warnings Hundreds of websites taken offline as concern grows over two PHP vulnerabilities https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
[–] tuckerm@feddit.online 6 points 22 hours ago (2 children) Nice. FreshRSS is the only PHP application I have running. I decided to just take it down this morning. permalink fedilink source hideshow 2 child comments replies: [–] otter@lemmy.ca [S] 1 point 21 hours ago (1 child) I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same It's weird seeing the widget on my phone blank now permalink fedilink source parent hideshow 1 child comment replies: [–] i_am_not_a_robot@discuss.tchncs.de 4 points 17 hours ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
[–] otter@lemmy.ca [S] 1 point 21 hours ago (1 child) I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same It's weird seeing the widget on my phone blank now permalink fedilink source parent hideshow 1 child comment replies: [–] i_am_not_a_robot@discuss.tchncs.de 4 points 17 hours ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
[–] i_am_not_a_robot@discuss.tchncs.de 4 points 17 hours ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
all 3 comments