Maybe something like git forges and gist alternatives?
Comment on Update all your stuff, NOW - again.
tofu@lemmy.nocturnal.garden 1 hour ago
I mean, not that it’s not severe, but which container images have ssh baked in? If you’re using good stripped down images, you’re fine here.
Not sure where the overlap is between"ssh is enabled" and “one of those OSes”. LXCs maybe?
HelloRoot@lemy.lol 1 hour ago
qaz@lemmy.world 53 minutes ago
I wonder if Forgejo / Gitea instances are vulnerable
tofu@lemmy.nocturnal.garden 54 minutes ago
Good Point! I’ll check if my forgejo container has password auth enabled. :D It’s LAN only though.
smiletolerantly@awful.systems 45 minutes ago
Remember, password-auth off is the problematic setting.
Orygin@sh.itjust.works 35 minutes ago
No you’re wrong. Stop dramatizing and spreading false info. From your link:
Prerequisites: Are password logins still on?
You can’t trigger this if password auth is disabled.
ikidd@lemmy.dbzer0.com 1 hour ago
SSH enabled and the SSH port of the container accessible.