Oct 21, 2026, 11:15 PMso what has broken the internet today?
1. php
2. node.js
3. gitlab
4. 4
5. musl
6. QUIC/HTTP/3
7. Signal
8. Apache Traffic Server
9. Pillow for Python, even!
10. bind
11. LiteLLM
12. XZ Utils
(Java is reported, but supposedly it's just their version of the 4 issue)
anything else I'm missing?
and apparently Railray (a cloud provider?) got hacked and are telling all their customers to rotate their secrets. Apparently things like API keys were stolen
Oct 21, 2026, 11:43 PMalso it's not TODAY (it seems it started up to two days ago) but there's an active plex vulnerability out there (Plex2Shell), so unpatched plex installations are being remotely hacked to host cryptominers, ddos remotes and such. Fun!
Oct 22, 2026, 4:29 AMbasically everything short of poob is broken
Oct 22, 2026, 4:51 AMrecommendation for tomorrow:
no one touch ANYTHING
Oct 21, 2026, 11:20 PM@swirly I thought plex was just them firing all their staff?
@foone apparently, Java and Fortinet? (Impending)
Oct 21, 2026, 11:22 PM@foone Hello friends, I urgently need your help. I need £200 to provide for my child's special needs, including milk and diapers. Please donate and share the link. 🙏🙏🍉😭
https://chuffed.org/project/208485-give-waleeds-family-a-chance-to-live
@foone yo dawg I heard you like CVEs https://www.oracle.com/security-alerts/alert-cve-2026-91403.html
Oct 21, 2026, 11:24 PM@NatGrayYes I think that one is just 4, but Oracle got their own CVE for it
@foone aaaand the post updated. lol
@foone what happened to signal??
Oct 21, 2026, 11:28 PM
Oct 21, 2026, 11:28 PM@foone also what happened with musl??
Oct 21, 2026, 11:30 PM@xeno integer overflow in regcomp():
@foone@digipres.club there's still time to expand the list...
@foone i can't find the thing about musl
Oct 21, 2026, 11:32 PM
Oct 21, 2026, 11:41 PM@foone LiteLLM
https://come-from.mad-scientist.club/@algernon/statuses/01M5GCJQG5JJ4TG4S1NMC2C01S
> Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
@foone what's the thing with 4 ? Is it an obscure meme I missed?
@foone thank you for this PSA!
Oct 21, 2026, 11:50 PM@foone /o\
@foone I really appreciate you mentioning this. I'm not always the best at keeping my Plex server up to date, but I made sure to update it immediately after seeing this o7
@foone FINALLY, poob has it for you
@foone
I'll be spending the day buried under a cat
Oct 22, 2026, 4:56 AM@foone i plan to take a nap
Oct 22, 2026, 4:56 AM@foone whole day in calendar as naptime
Oct 22, 2026, 5:07 AM@gewt good plan
Oct 22, 2026, 5:08 AM@foone No deal! I'm gonna ship bugfixes to production!
@foone unfortunately in making sure the PHP stuff is taken care of, I realized some old sites are running really old versions of WordPress that use PHP 5.6 (luckily either the server host or CENTOS are backporting security updates for 5.6), and in trying to update things I realized I have to renew SSL certificates, here’s hoping LetsEncrypt at least has their head on straight
@foone Fine. But I'm taking my screwdriver with me...
🎨by soggygoat
@catsalad aww how cute... Did you draw this? Or Do you have a source? Also, I kind of want to make a drmon core night light now.
@floriantfw I did not, and I only know the artist's name is soggygoat
EDIT: Source looks to be
https://inkbunny.net/s/2617721-p1-SoggyGoat-picture-pinup-mimi-and-the-demon-core-cat-death-demon-core-feline-female-imminent-death-implied-death-radiation-screwdriver
Oct 22, 2026, 5:27 AM@foone everyone could use it as a chance to get some sleep
@foone clurf,
@foone Poob had to move to Neocities because some fuckasses took their domain.
For those not on Tumblr: I did not make that up.
@foone Jellyfin's decision to yeet certificates (in their next major release) to force people to stop rawdogging the internet seems increasingly reasonable.
Oct 22, 2026, 6:02 AM@foone glad to be using Jellyfin I suppose
@foone liteLLM got pwned. Again. Infostealer + rat, iirc
@foone What happened to Apache? Do I need to be concerned if I run it as my web server?
Oct 22, 2026, 12:17 AM@vaporeon_ nah. Apache Traffic Server is a separate proxy server package
Oct 22, 2026, 12:20 AM@foone this should be a daily pool or a endless bet thing
@foone I just want to say thank you for making 4 4. 🫡
Oct 22, 2026, 12:56 AM@foone my api key is 7, they’ll never work it out ✨😼
@foone oh and also pingcap drop: https://fulcrumsec.vg/pingcap/
@foone
I never want to hear anybody say "it's always DNS" again...
@foone
SIGNAL?
@foone wait, all of this was one day?!
@foone Palantair? Egor?
@foone Oh also RCE in ZX Utils https://ubuntu.com/security/notices/USN-8945-1
@foone I heard firefox too. I don't know how serious though.
Oct 22, 2026, 3:12 AM@foone whoa, what? xz again? Hopefully not a spy again!
Edit: Nm, found it. An RCE. Yikes. https://social.furry.nz/@kyhwana/117482303357870465
@foone that's a lot more than I heard about. What happened with signal? I didn't see that and didn't see any news upon searching.
@foone wait, bind twice?
Oct 22, 2026, 4:30 AM@astraluma thinko
actually apparently bind fixed 3 vulns so I was off by 1 in either direction
Oct 22, 2026, 4:32 AM@foone @astraluma i saw 4 bind vulns?
Oct 22, 2026, 4:32 AM@gewt @astraluma even my off by 1 errors are off by one
Patches for a handful of libssh CVEs came through on oldoldstable this morning.
