136
Important - Piefed.zip down due to security maintenance (Resolved) (lemmy.zip)
submitted 6 months ago by to c/announcements@lemmy.zip
29 comments fedilink hide all child comments
👍️ 1
 

Edit: see pinned comment for update

Hello All,

Due to the incredibly irresponsible disclosure of a security vulnerability for Piefed, we've had to take Piefed.zip offline until a fix can be put in place.

I'll update more once I have more information.

Many thanks

Demigodrick

you are viewing a single comment's thread
view the rest of the comments
[–] -3 points 6 months ago

You can look at https://codeberg.org/rimu/pyfedi/releases/tag/v1.6.25 to see the changes.

Basically, the 0-day was mostly someone running an LLM and trying to discover vulnerabilities without double checking them. Most of the things reported were not applicable (mentioning functions that don't even exist), others were not applicable but led to some tangent hardening.

Lemmy also had a SSRF vulnerability a month ago: https://github.com/LemmyNet/lemmy/security/advisories/GHSA-q537-8fr5-cw35

  • permalink
  • fedilink
  • source
  • parent