this post was submitted on 24 Dec 2025
97 points (98.0% liked)

Self-hosting

4566 readers
1 users here now

Hosting your own services. Preferably at home and on low-power or shared hardware.

Please don't share vibe coded projects here.

Also check out:

founded 4 years ago
MODERATORS
poVoq@slrpnk.net
sam_uk@slrpnk.net
97
PSA: If you are running a Matrix homeserver written in Rust, you'll need to upgrade NOW (see updates in comments) (self.selfhosting)
submitted 8 months ago* (last edited 7 months ago) by stratself to c/selfhosting@slrpnk.net
1 comments fedilink hide all child comments
 

There is a recently discovered critical vulnerability that affects all Matrix homeservers of the Conduit lineage. If you're using a Rust-based Matrix server (which are basically Conduit and forks), please urgently upgrade to the following versions:

If you're not able to upgrade right now, you should urgently implement this workaround in your reverse proxy.

Attackers exploiting this flaw can arbitrarily kick any user out of a room, join rooms unauthorized on the same server, and can also ban same-server users. They effectively constitute a severe denial of service from an unauthenticated party, and it has been exploited in the wild.

you are viewing a single comment's thread
view the rest of the comments
[–] stratself 2 points 7 months ago* (last edited 7 months ago)

YOU WILL NEED TO UPDATE AGAIN!

There is another vulnerability making the rounds with details pending embargo. Please update to the latest version (again)