▲ 52 ▼ Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities (github.com) submitted 2 weeks ago by otter@lemmy.ca to c/selfhosted@lemmy.world 3 comments fedilink hide all child comments While you should probably take some services offline altogether, FreshRSS has an update out. Just one of many updates that we're going to be seeing over the next few hours / days. For those who haven't seen it yet https://therecord.media/php-script-vulnerabilities-warnings Hundreds of websites taken offline as concern grows over two PHP vulnerabilities https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
[–] tuckerm@feddit.online 6 points 2 weeks ago (2 children) Nice. FreshRSS is the only PHP application I have running. I decided to just take it down this morning. permalink fedilink source hideshow 2 child comments replies: [–] otter@lemmy.ca [S] 1 point 2 weeks ago (1 child) I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same It's weird seeing the widget on my phone blank now permalink fedilink source parent hideshow 1 child comment replies: [–] i_am_not_a_robot@discuss.tchncs.de 4 points 2 weeks ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
[–] otter@lemmy.ca [S] 1 point 2 weeks ago (1 child) I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same It's weird seeing the widget on my phone blank now permalink fedilink source parent hideshow 1 child comment replies: [–] i_am_not_a_robot@discuss.tchncs.de 4 points 2 weeks ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
[–] i_am_not_a_robot@discuss.tchncs.de 4 points 2 weeks ago The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP. permalink fedilink source parent
all 3 comments