### Security Update: Hollo 0.6.19 Released
Fediverso
3
Posts
1
Posters
23
Views
-
Security Update: Hollo 0.6.19 Released
We have released Hollo 0.6.19 to address a security vulnerability in Fedify's HTML parsing code.
This vulnerability (CVE-2025-68475) is a ReDoS (Regular Expression Denial of Service) issue that could allow an attacker to cause service unavailability by sending specially crafted HTML responses during federation operations. The malicious payload is small (approximately 170 bytes) but can block the Node.js event loop for extended periods.
We strongly recommend all Hollo operators upgrade to version 0.6.19 immediately.
Field Details CVE CVE-2025-68475 Severity High (CVSS 7.5) Action Upgrade to Hollo 0.6.19 #Hollo #Security #Fediverse #ActivityPub
-
보안 업데이트: Hollo 0.6.19 릴리스
Fedify의 HTML 파싱 코드에서 발견된 보안 취약점을 수정한 Hollo 0.6.19를 릴리스했습니다.
이 취약점(CVE-2025-68475)은 ReDoS(정규 표현식 서비스 거부) 문제로, 공격자가 연합 작업 중 특수하게 조작된 HTML 응답을 보내 서비스 장애를 유발할 수 있습니다. 악성 페이로드는 작지만(약 170바이트), Node.js 이벤트 루프를 장시간 차단할 수 있습니다.
모든 Hollo 운영자분들께 즉시 버전 0.6.19로 업그레이드하실 것을 강력히 권고드립니다.
항목 상세 CVE CVE-2025-68475 심각도 높음 (CVSS 7.5) 조치 Hollo 0.6.19로 업그레이드 #Hollo #보안 #페디버스 #연합우주 #ActivityPub
-
보안 업데이트: Hollo 0.6.19 릴리스
Fedify의 HTML 파싱 코드에서 발견된 보안 취약점을 수정한 Hollo 0.6.19를 릴리스했습니다.
이 취약점(CVE-2025-68475)은 ReDoS(정규 표현식 서비스 거부) 문제로, 공격자가 연합 작업 중 특수하게 조작된 HTML 응답을 보내 서비스 장애를 유발할 수 있습니다. 악성 페이로드는 작지만(약 170바이트), Node.js 이벤트 루프를 장시간 차단할 수 있습니다.
모든 Hollo 운영자분들께 즉시 버전 0.6.19로 업그레이드하실 것을 강력히 권고드립니다.
항목 상세 CVE CVE-2025-68475 심각도 높음 (CVSS 7.5) 조치 Hollo 0.6.19로 업그레이드 #Hollo #보안 #페디버스 #연합우주 #ActivityPub
セキュリティアップデート: Hollo 0.6.19 リリース
FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。
この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。
すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。
項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub
-
undefined hongminhee@hollo.social shared this topic on
Gli ultimi otto messaggi ricevuti dalla Federazione
-
@michael I follow you and have though the same. But sometime a new take on the solution can show the way. This is a POC for now. If the result is a new drive for making e.i. Friendica better that would just as good. Sometimes it takes a new-kid-on-the-block to get things moving. I really really like to se a fediverse SoMe for the masses.
-
@labrezza
Yes, pieno. Guarda anche https://primaire.forge.apps.education.fr e https://ressourcerie.forge.apps.education.fr/
-
@jens a docker host and with a proxy. It will come with a traefik container ready to you or your can use your own. I dont know performance requirements yet, but I a'm for it to be low. Right now running in 8GB host also running ghost,peertube,wordpress etc.
-
@arildsen The goal is to make it more simpel to use, install and look like something may will reconize right away. It not that different from Friendica - but perhaps more active and modern looking.
-
@sindum Spændende! Signed op
-
@leanderlindahl Goodmoring - Approved - please understand that this is very earlydays - Welcome.
-
@sindum signed up, waiting for approval 😁
-
@sindum i think you're on to something here. Looking forward to trying it out. 👍
It would be amazing if the group feature turns out to work well. Here in Sweden that's probably the main "lock-in" fb has on the users. You miss out on what's happening in your neighbourhood, town, summer vacation village, special interest community etc. Even political parties organise local and national groups through fb.
