There is some information about a vulnerability in the Lemmy frontend.
So I have questions for the SDF mods and admins.
- Has this affected our instance in any way?
- Has the fix been applied to our frontend?
Or is our instance like the Elusive Joe, and we're not so big yet that we're worth hacking?
8 Comments
MINION@lemmy.sdf.org · 12 pts · 3y
Earlier this morning all four lemmy (lemmy.sdf.org, lemmy.sdfeu.org lemmy.sdfjp.org and lemmy.sdfcn.org) instances were updated to UI: 0.18.2-rc.1 BE: 0.18.1-10-g9c2490d4f.
astramist@lemmy.sdf.org · 5 pts · 3y
Oh, exactly! There's a pinned post in the community that reports Lemmy version updates on the server.
gt24@lemmy.sdf.org · 4 pts · 3y
This seems like a rather new situation. The Github links below seem to mention that other instances were also suffering problems.
https://github.com/LemmyNet/lemmy-ui/issues/1895
https://github.com/LemmyNet/lemmy-ui/pull/1897
It appears like a fix was only made available about an hour ago.
https://github.com/LemmyNet/lemmy-ui/issues/1895#issuecomment-1629219976
wesker@lemmy.sdf.org · 3 pts · 3y
Do some instances require an email address? SDF didn't when I signed up, which I thought was awesome.
astramist@lemmy.sdf.org · 3 pts · 3y
Some do. E.g. lemmy.world.
For some instances, email can be filled and isn't mandatory. E.g. beehaw.org.