2025-07-17 02:22 UTC
๐จ Security Update: Hollo 0.6.5 Released
We've released #Hollo 0.6.5 with a critical #security fix for CVE-2025-53941, addressing an HTML injection vulnerability in federated posts.
Please #update immediately to protect your instance from potential phishing and XSS attacks.
How to update:
Railway: Go to deployments โ click three dots โ RedeployDocker: docker pull ghcr.io/fedify-dev/hollo:latest and restartManual: git pull origin stable && pnpm install and restart server
Replies (1)
-
@hollo@hollo.social 2025-07-17 02:23
๐จ ๋ณด์ ์ ๋ฐ์ดํธ: Hollo 0.6.5 ๋ฆด๋ฆฌ์ค CVE-2025-53941 #๋ณด์ ์ทจ์ฝ์ ์ ํด๊ฒฐํ๋ #Hollo 0.6.5๋ฅผ ๋ฆด๋ฆฌ์คํ์ต๋๋ค. ์ฐํฉ ๊ฒ์๋ฌผ์ HTML ์ฃผ์ ์ทจ์ฝ์ ์ด ์์ ๋์์ต๋๋ค. ํผ์ฑ ๋ฐ XSS ๊ณต๊ฒฉ์ผ๋ก๋ถํฐ ์ธ์คํด์ค๋ฅผ ๋ณดํธํ๊ธฐ ์ํด ์ฆ์ ์ ๋ฐ์ดํธํด ์ฃผ์ธ์. ์ ๋ฐ์ดํธ ๋ฐฉ๋ฒ: Railway: ๋ฐฐํฌ ํญ โ ์ ์ธ ๊ฐ ํด๋ฆญ โ RedeployDocker: docker pull ghcr.io/fedify-dev/hollo:latest ํ ์ฌ์์์๋: git pull origin stable && pnpm install ํ ์๋ฒ ์ฌ์์ #์ ๋ฐ์ดํธ