Follow
the big vulnerability thing and jorts.horse
the vuln was apparently introduced in v3.5
we are running v3.3.0
LETS FUCKIN GO, WE'RE SIMPLY TOO OLD TO FUCK WITH, BABEYYYYY
i do need to update this shithole at some point because there's probably a dozen other minor vulns from being so fucking decrepit but you can rest easy that the big problem everyone's panicking about doesn't apply to us, probably
@killeveryhetero would be nice to see a version that plays a little better with http://elk.zone, since that thing is slick as hell
the big vulnerability thing and jorts.horse
@killeveryhetero that's only partially true.
CVE-2023-36460 only affects versions >=3.5, but
CVE-2023-36459 affects all versions >=1.3.
somebody link me a funny fork of masto to switch to that includes the vuln patch (i'm not doing it immediately but feel free to throw ideas into the pile)