How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

diaspora* security release 0.7.18.2

calendar_today July 10, 2023 person Diaspora* Foundation domain diaspora

We just released a new diaspora* version, which addresses possible security issues when processing images uploaded by users that is affecting some system configurations. This fix was heavily inspired by Mastodon’s fix for GHSA-9928-3cp5-93fm , and while diaspora*s attack surface is significantly smaller and some operating systems do ship a restrictive ImageMagick policy, this release makes sure that everyone is safe. Thank you Cure53 for finding this issue, thank you Mozilla for paying Cure53 to look into it, and thanks for Mastodon for fixing it.

open_in_new Read original post