RetroFed Forums
Your home away from modern life.
Search Categories Forum list Register Log in
About RetroFed
RetroFed

Welcome to the nostalgia-filled piefed instance of yesteryear.

Open Registration with Application questionnaire.

If you have a question or comment you can post in !meta@retrofed.com or message @DosDude@retrofed.com or @Die4Ever@retrofed.com

In case of downtime and/or emergency, we will post updates on @DosDude@mastodon.social

Some rules we try to uphold:

  • Be civil. Bigotry is not welcome. This includes (but is not limited to): transphobia, queerphobia, racism, ageism and ableism. We do not promote hate.
  • Communities need to be Retro or Retro-adjacent.
  • Please don't upload pornographic content. (use an external image host for that)
72 registered users
Administrators: DosDude, Die4Ever
Visit retrofed.com
Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities
Post Reply RetroFed Forums Forum Index » Selfhosted
AuthorMessage
Otter
lemmy.ca

otter@lemmy.ca
Joined: 2023-06-05
Posted:   Subject: Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities Quote

Link: https://github.com/FreshRSS/FreshRSS/releases/tag/1.30.3

While you should probably take some services offline altogether, FreshRSS has an update out.

Just one of many updates that we're going to be seeing over the next few hours / days.

For those who haven't seen it yet

https://therecord.media/php-script-vulnerabilities-warnings

Hundreds of websites taken offline as concern grows over two PHP vulnerabilities

https://www.huntress.com/blog/php2shell-leaked-critical-php-vulnerabilities
52   Original
tuckerm
feddit.online

tuckerm@feddit.online
Joined: 2025-03-06
#2 Posted:   Subject: Re: Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities Quote Reply

Nice. FreshRSS is the only PHP application I have running. I decided to just take it down this morning.
6
Otter
lemmy.ca

otter@lemmy.ca
Joined: 2023-06-05
#3 Posted:   Subject: Re: Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities Quote Reply
tuckerm wrote:
Nice. FreshRSS is the only PHP application I have running. I decided to just take it down this morning.

I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same

It's weird seeing the widget on my phone blank now
1
i_am_not_a_robot
discuss.tchncs.de
i_am_not_a_robot@discuss.tchncs.de
Joined: 2023-06-19
#4 Posted:   Subject: Re: Release FreshRSS 1.30.3 - patching severe PHP vulnerabilities Quote Reply
Otter wrote:
I tried to update mine and saw that there wasn't an easy path to update it yet, so I decided to do the same It's weird seeing the widget on my phone blank now

The vulnerability is in PHP. This FreshRSS release addresses the vulnerability by updating the version of PHP in the container image. If you're not using the official FreshRSS container image, you just need to update your PHP.
5
Post Reply Page 1
Powered by RetroFed · PieBB frontend · All times are Europe/Amsterdam