mitigated a security vulnerability lmao
https://gaysex.cloud/_matrix/federation/v2/invite/
https://github.com/continuwuity/continuwuity/security/advisories/GHSA-22fw-4jq7-g8r8
https://github.com/sodiboo/system/commit/10dd0c93da3b5dadc883e08367a6b81321a0fcf1

@sodiboo > 9.9 CVE

@sodiboo overlay matrix-continuwuity with the package from https://git.chir.rs/darkkirb/nixos-config under packages/matrix/continuwuity

@charlotte no I’m just gonna block the endpoint I don’t care enough to upgrade for real right now

@sodiboo (also there is a raccache at cache.web.chir.rs with key nixcache:8KKuGz95Pk4UJ5W/Ni+pN+v+LDTkMMFV4yrGmAYgkDg=)

@sodiboo i just upgraded immediately lol

@sodiboo I <i>could</i> mitigate it by updating continuwuity but I’m not spending another few hours rebuilding from source

Since I’m getting new hardware anyway, 4 days of downtime for a personal server is fine

The official docker images for arm don’t run due to jemalloc unfortunately so I have to build my own

@sodiboo good sodi

@alina

@sodiboo If you can just send any message as an error in people’s clients why make it so ambiguous 😭