@adam it looks like most of what runs docker is locked behind tailscale so nothing's exposed but both local and remote fleets are being fully checked and updated. Better safe then fucked.
@munchkinbear Yeah, don't dismiss it. Guaranteed there's an insanely out of date PHP version clanging about in your public facing setup. Think of the CPanel server. Anyway, this touches everything that has a CA root certificate chain, which I will say that every device and virtual thingy does too. This is way more than apt update && apt upgrade
@adam yeah all the cpanel boxes NS and hosting got smacked first, the rest seem to be running fully updated php releases. I had to poke at the billing VPS a bit but the rest are thankfully clean and updated. I just finished removing the older PHP versions from the cpanel hosting box, if a customer has an issue, I'll probably hear about it then tell them welp use something that uses modern PHP, lol.
@adam masto hasn't patched yet, but everything else on the OS level I run looks to be patched. and reboots applied where necessary.
@munchkinbear Mastodon not affected by the PHP bugs, but they are affected by the CA Root Certificate compromise. I smashed my servers up to glitch latest as of 5 aM this morning. Best we can do. I'm sure they rolled the 5.0 interface, fuck!
@adam I just checked and it indicated no updates since I last ran it.