196
EDIT: BentoPDF version 1.16.1 now uses bentopdfteam/bentopdf and is the official account, and bentopdf/bentopdf is deprecated and not maintained anymore (www.reddit.com)
submitted 9 months ago by to c/selfhosted@lemmy.world
16 comments fedilink hide all child comments
 

See this comment for the latest update: https://lemmy.ca/post/58815307/21337921

Original title: BentoPDF urgent security notice: do not pull or update

Original Post:

See the post in the link for the latest details. As of me making this post

Due to an error during an organization migration, we have temporarily lost control of the bentopdf namespace on Docker Hub. The bentopdf username/namespace may currently be in a released state, meaning it could potentially be registered by a third party.

all 17 comments

sorted by: hot top controversial new old
[–] [S] 30 points 9 months ago* (last edited 9 months ago) (5 children)

@alam@lemmy.world is also on the threadiverse, and may post updates about this as it develops

  • permalink
  • fedilink
  • source
  • hideshow 5 child comments
    •
  • [–] 12 points 9 months ago (4 children)

    Thank you for sharing this, and apologies for not posting it here sooner. I will update it as soon as I receive any responses.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] [S] 2 points 9 months ago (2 children)

    I see the original post got removed by moderators to prevent panic. Would you have an update that you can share in this thread? I'm happy to edit the title of this post too :)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 9 months ago* (1 child)

    Hello!

    Our issue has been resolved. Our new version 1.16.1 now uses bentopdfteam/bentopdf and is the official account, and bentopdf/bentopdf is deprecated and not maintained anymore. GHCR is now the recommended source, and we have also added Podman Quadlet support.

    Since I don't want to spam by making another post I'd be happy if you could please edit this post. Thank you (:

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
    • [–] 43 points 9 months ago* (last edited 9 months ago) (4 children)

    I guess they now have large enough number of users that it would be wise to shift some focus to supply-chain security from growth-hacking.

    This is growing pains.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [+] -17 points 9 months ago (3 children)

    Called it.

    https://feddit.online/post/1372107/comment/6758185

    No one listen grug til chicken come to roost

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
    • [–] 11 points 9 months ago

    Wuh oh

  • permalink
  • fedilink
  • source
    •
    [+] -8 points 9 months ago* (last edited 9 months ago) (4 children)
    [deleted]
  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 14 points 9 months ago (3 children)

    Unless said software has any components that may be network-accessible in which case make sure the software is up to date (although you should also make sure you trust the source)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 0 points 9 months ago (2 children)

    That moment you are so sarcastic everyone think you're 1st degree...

    That was supposed to be a joke.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 5 points 9 months ago

    This is supposed to be a place for people to learn about self hosting, not for experts to joke about poor practices that real people actually have. Use /s for clarity.

  • permalink
  • fedilink
  • source
  • parent