@Harald Eilertsen Of course. But since there's no upgrade available yet it can't hurt to (temporarily) disable session.upload_progress :-)
original
Comment on @Hubzilla Support Forum Apparently there is a workaround for this: https://j
@Mark Nowiasz Thanks, that's a likely stopgap measure for one of the problems, the other is not so easily mitigated. It's still advisable to upgrade as soon as the patch is dropped.
buckaroo@hub.netzgemeinde.eu 16 hours ago
- @Mark Nowiasz Absolutely agree! Definitely apply the mitigation, but be aware it's not sufficient for all (most?) attack vectors.original