Selfhosted

40218 readers

1000 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Be civil: we're here to support and learn from one another. Insults won't be tolerated. Flame wars are frowned upon.
No spam posting.
Posts have to be centered around self-hosting. There are other communities for discussing hardware or home computing. If it's not obvious why your post topic revolves around selfhosting, please include details to make it clear.
Don't duplicate the full text of your blog or github here. Just post the link for folks to click.
Submission headline should match the article title (don’t cherry-pick information from the title to fit your agenda).
No trolling.

Resources:

selfh.st Newsletter and index of selfhosted software and apps
awesome-selfhosted software
awesome-sysadmin resources
Self-Hosted Podcast from Jupiter Broadcasting

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 1 year ago

MODERATORS

HybridSarcasm@lemmy.world

HybridSarcasm@lemmy.hybridsarcasm.xyz

279

If you are running Vaultwarden, you need to update. There is a CVE (github.com)

submitted 1 week ago* (last edited 1 week ago) by otter@lemmy.ca to c/selfhosted@lemmy.world

9 comments fedilink hide all child comments

This release has fixed some CVE Reports reported by a third party security auditor and we recommend everybody to update to the latest version as soon as possible. The contents of these reports will be disclosed publicly in the future.

cross-posted from: https://lemmy.eco.br/post/8758930

If you're using Vaultwarden, you should update because of security fixes.

top 9 comments

sorted by: hot top controversial new old

[–] popcorp@discuss.tchncs.de 2 points 6 days ago

Thanks. I logged in immediately to update the image, but luckily it was already updated by watchtower yesterday.

[–] state_electrician@discuss.tchncs.de 29 points 1 week ago

My Vaultwarden is behind a private VPN, but I'll still update today. Thanks.

[–] EmbarrassedDrum@lemmy.dbzer0.com 19 points 1 week ago* (last edited 6 days ago) (1 children)

Just the reason why I stopped using Vaultwarden and returned to Bitwarden (EDIT: ditching self hosting the password manager).

I'm not specialized in this, can't update right away, might not know of all security vulnerabilities I have - better leave it for the professionals.

[–] matcha_addict@lemy.lol 13 points 6 days ago (1 children)

I think what you mean is abandoning self hosting right? Because self hosting Bitwarden would have similar issues if you don't take the initiative to update.

[–] EmbarrassedDrum@lemmy.dbzer0.com 6 points 6 days ago

yes, you're right. my message was unclear, I see now. While I do self host many other things, I just didn't want to take the risk regarding my password manager.

[–] ComradeMiao@lemmy.world 14 points 1 week ago

thanks

[–] MaggiWuerze@feddit.org 9 points 1 week ago

Thanks for posting

[–] gregor@gregtech.eu 6 points 1 week ago

Thanks for the tip

[–] Oha@lemmy.ohaa.xyz 6 points 1 week ago

Just updated, thanks!