builds, pages, and paste require update to address security vulnerability

Drew DeVault <sir@cmpwn.com>

Details

Message ID: <CL3EUX59O0ZD.35CS3A1DQNV02@taiga>
DKIM signature: missing

Download raw message

2 years ago

Following the security vulnerability announced[0] last month, we rolled
out GraphQL support for additional APIs yesterday and mistakenly
included the older, vulnerable code. If you updated your services within
the last 24 hours, please upgrade again.

[0]: https://lists.sr.ht/~sircmpwn/sr.ht-admins/%3CCKD3EXDSZA0X.3BBPVWKN58UEJ%40taiga%3E

Patched versions of the affected services are:

builds	0.82.1
pages	0.8.1
paste	0.14.1