Sorry for all the boosts folks. This is nuts. Expect me to be rather grumbly for a week or so. Oh well, such as life. They did a lot of work to coordinate the fix, so its just on us to brunt the work of finding and patching every legacy system, and hope automatic updates don't break the rest, LOL.
My word, the phone systems! The phone systems! I so don't ccare, but they're obviously an important backup and certainly handy in a pinch. The VM and OS are patched, but do they actually still work? Oh my word, all the radio stations, its all pending in the pipeline. Oy! Like seriously guys, someone in my position has at least a week's work cut out right in front of him right now. I don't mind the grind work, but it will bring me absolutely $0 in gains, and I am seriously hoping no losses. Certainly a total loss on time on this one. But that's the life I guess. not like anyone ever said it was fair or anything.
@adam I'm rolling through both local and remote fleets checking for updates.
@munchkinbear Its all the containers dude. Bad bad bad. and Docker usually leaves the gates wide the fuck open, and when you try to slam them shut, you do, along with everythign else, LOL. I fucking hate Docker firewalling! Gaaaaaaark!
@adam it looks like most of what runs docker is locked behind tailscale so nothing's exposed but both local and remote fleets are being fully checked and updated. Better safe then fucked.
@munchkinbear Yeah, don't dismiss it. Guaranteed there's an insanely out of date PHP version clanging about in your public facing setup. Think of the CPanel server. Anyway, this touches everything that has a CA root certificate chain, which I will say that every device and virtual thingy does too. This is way more than apt update && apt upgrade
@adam yeah all the cpanel boxes NS and hosting got smacked first, the rest seem to be running fully updated php releases. I had to poke at the billing VPS a bit but the rest are thankfully clean and updated. I just finished removing the older PHP versions from the cpanel hosting box, if a customer has an issue, I'll probably hear about it then tell them welp use something that uses modern PHP, lol.
@adam masto hasn't patched yet, but everything else on the OS level I run looks to be patched. and reboots applied where necessary.
@munchkinbear Mastodon not affected by the PHP bugs, but they are affected by the CA Root Certificate compromise. I smashed my servers up to glitch latest as of 5 aM this morning. Best we can do. I'm sure they rolled the 5.0 interface, fuck!
@adam I just checked and it indicated no updates since I last ran it.
@adam I literally just did mine and went, do I even use this thing anymore? lol.