Gajim - 2024-01-26

Hello Gajim folks.

I administer a gitlab instanc at work, and I have just upgraded to `v16.8.1` because of https://about.gitlab.com/releases/2024/01/25/critical-security-release-gitlab-16-8-1-released/

I note that https://dev.gajim.org i still on `v16.7.2`which is vulnerable

Today I tried to access https://salsa.debian.org and it doen't seem in good shape ...

Ok, seems debian already repaired salsa ... 💪️ ✏

Maybe they were simply upgrading this morning, now they are on `v16.5.8` ( *not* vulnerable )

asterix ^

resoli, v16.7.2 is from Jan 11, 2024

we update regulary, but not weekly :D

Bus this one has a CVE of 9.9 :D

lovetox: Same for me, I updated last week or so, but as cal0pteryx suggests, this is a special case.

https://www.bleepingcomputer.com/news/security/over-5-300-gitlab-servers-exposed-to-zero-click-account-takeover-attacks/

This is reporting about former vulnerability, ~not~ *and* latest one ... ✏

And this is reporting about former vulnerability, not latest one ... ✏

https://nvd.nist.gov/vuln/detail/CVE-2024-0402