this post was submitted on 10 Jul 2023
5 points (100.0% liked)

lemmy.wtf meta

171 readers
1 users here now

Anything about the lemmy.wtf instance and its moderation.

For discussion about the Lemmy software project, go to c/lemmy.

founded 2 years ago
MODERATORS
[email protected]
5
Lemmy 0.18.2 Security Release | BE ➡ 0.18.2 | UI ➡ 0.18.2 (lemmy.world)
submitted 2 years ago* (last edited 2 years ago) by necropola to c/[email protected]
5 comments fedilink hide all child comments
 

Security and Performance Improvements

https://join-lemmy.org/news/2023-07-11_-_Lemmy_Release_v0.18.2

Latest Backend (BE) Release ~~Candidate (RC)~~

Latest Frontend (UI) Release ~~Candidate (RC)~~

top 5 comments
sorted by: hot top controversial new old
[–] necropola 4 points 2 years ago* (last edited 2 years ago)

BE ➡ 0.18.2-rc.2 | UI ➡ 0.18.2-rc.2

Now using release branches (release/v0.18) for BE and UI

[–] necropola 4 points 2 years ago* (last edited 2 years ago)

BE ➡ 0.18.2 | UI ➡ 0.18.2

@[email protected]
Probably does not hurt to upgrade, despite the fact that we didn't have any custom emojis.

Additionally it disallows inline Javascript using Content Security Policy. This should ensure that XSS vulnerabilities are impossible from now on.

[–] necropola 3 points 2 years ago* (last edited 2 years ago) (1 children)

@[email protected] If lemmy.wtf is using custom emojis, you should probably update to the latest UI Release Candidate, i. e. the latest lemmy-ui docker image.

[–] [email protected] 4 points 2 years ago (1 children)

It is not, so we are safe.

[–] necropola 3 points 2 years ago