Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  • hollo@hollo.socialundefined

    ### Security Update: Hollo 0.6.19 Released

    Fediverso hollo security fediverse activitypub
    3
    0 Votes
    3 Posts
    3 Views
    hollo@hollo.socialundefined
    セキュリティアップデート: Hollo 0.6.19 リリース FedifyのHTMLパースコードにおけるセキュリティ脆弱性に対応したHollo 0.6.19をリリースしました。 この脆弱性 (CVE-2025-68475) は ReDoS (正規表現によるサービス拒否) の問題であり、攻撃者がフェデレーション操作中に特別に細工されたHTMLレスポンスを送信することで、サービス停止を引き起こす可能性があります。悪意のあるペイロードは小さい (約170バイト) ですが、Node.jsのイベントループを長時間ブロックする可能性があります。 すべてのHollo運営者の皆様には、直ちにバージョン 0.6.19 へのアップグレードを強くお勧めします。 項目 詳細 CVE CVE-2025-68475 深刻度 高 (CVSS 7.5) 対応 Hollo 0.6.19 にアップグレード #Hollo #セキュリティ #fediverse #ActivityPub
  • hongminhee@hollo.socialundefined

    It looks like a new minor release of #Hollo (v0.7.0) will be out soon, the first in several months.

    Uncategorized hollo
    3
    0 Votes
    3 Posts
    17 Views
    hongminhee@hollo.socialundefined
    近いうちに数ヶ月ぶりの新しいHolloのマイナーリリース（v0.7.0）が出そうだね。
  • hollo@hollo.socialundefined

    #Hollo 0.7 brings a redesigned #notification system with much better performance.

    Uncategorized hollo mastodon notification notifications
    1
    0 Votes
    1 Posts
    5 Views
    hollo@hollo.socialundefined
    #Hollo 0.7 brings a redesigned #notification system with much better performance. We've moved from generating #notifications on-demand to storing them as they happen, which makes the notifications endpoint about 60% faster. We've also added response compression (though if you're using a reverse proxy, you probably had this already). More notably, Hollo 0.7 implements Mastodon's v2 grouped notifications API. Notifications like favorites, follows, and reblogs targeting the same post or account are now grouped together server-side, reducing clutter. Clients that support the new API (introduced in #Mastodon 4.3) will show cleaner, more organized notifications automatically. Hollo 0.7 is still in development, but we're excited to share it with you when it's ready!
  • hongminhee@hollo.socialundefined

    If you're running #Hollo, please update to version 0.6.12 as soon as possible.

    Uncategorized hollo security vulnerability
    5
    0 Votes
    5 Posts
    17 Views
    hongminhee@hollo.socialundefined
    @ysh@social.long-echo.net 네, 0.5는 이제 나온 지 半年이 넘어서, 0.6으로 올리셔야 할 것 같습니다!

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti