Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone
  1. Home
  2. Categories
  3. Technical Discussion
  4. interesting writeup about federated package management by @andrewnez#fedidev

interesting writeup about federated package management by @andrewnez#fedidev

Technical Discussion
1 1 2
Log in to reply

Feed RSS
interesting writeup about federated package management by @andrewnez#fedidev

Gli ultimi otto messaggi ricevuti dalla Federazione
@pierobosio@soc.bosio.info
Post suggeriti
  • fedify@hollo.socialundefined

    ### šŸšØ Security Advisory: CVE-2025-68475

    Fediverso fedify fedidev security fediverse activitypub
    1
    1 Votes
    1 Posts
    6 Views
    fedify@hollo.socialundefined
    šŸšØ Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ā‰¤1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev
  • vyr@princess.industriesundefined

    i'm moving my stuff off GitHub because i'm sick of Microsoft's shit.

    Technical Discussion slurp fedidev
    1
    0 Votes
    1 Posts
    9 Views
    vyr@princess.industriesundefined
    i'm moving my stuff off GitHub because i'm sick of Microsoft's shit. today's task is slurp.the official project home page has been https://catgirl.codes/slurp for a bit, but now that's also the package URL as far as Go is concerned. this will be a breaking change for anyone who depended on slurp internals, which i hope is nobody. there's some sort of package renaming directive you can use in go.mod if you did.the public Git repo and issue tracker are now on Codeberg: https://codeberg.org/vyr/slurpif you can, please donate to Codeberg. i just did (again). they're a great option for open source devs like me who aren't SREs and don't want the overhead of self-hosting all that stuff, and running a service like that isn't free.#slurp #FediDev
  • reiver@mastodon.socialundefined

    If we were to do a regular online Fediverse meeting ā€”

    Technical Discussion activitypub fedidev fediux fediverse fediverseux socialweb
    2
    0 Votes
    2 Posts
    16 Views
    evan@activitypub.spaceundefined
    reiver@mastodon.social so, are we doing this?
  • reiver@mastodon.socialundefined

    I just did a video-chat with @sl007 ā€”

    Technical Discussion fediverse fedidev socialweb
    2
    0 Votes
    2 Posts
    7 Views
    sl007@digitalcourage.socialundefined
    @reiver well, a short summary;Public Spaces was full, the Social CG October meeting had 36 attendees, the November meeting was the dev meeting, the December meeting had 40 people who partly prepared #39c3 which then had 16.000 attendees.Happy New Year anyone ā€“ and thank you to all the volunteers who made this possible. We do also have german meetings, next one is in 2 weeks, et al. tell me if you are interested.