2026-09-03 13:47 UTC
When you say 'it fixes an issue that can lead to denial of service attacks', what was that exactly? I want to write that in the freebsd port update notes, so that maybe it'll get some priority.
Replies (1)
-
@grunfink@comam.es 2026-09-03 13:58
Hi. Specifically, the first mentioned fix: Fixed a bug in the notification page that made snac hang forever while trying to read abnormally big files. Some users had detected very big files (caused by probably intentionally malicious posts) in the notification area that made it unaccesible. The fix consists in a) taking care that those humungous files are no longer created, and b) if they already exist, they are ignored. Thanks for the FreeBSD port!