See this comment for the latest update: https://lemmy.ca/post/58815307/21337921
Original title: BentoPDF urgent security notice: do not pull or update
Original Post:
See the post in the link for the latest details. As of me making this post
Due to an error during an organization migration, we have temporarily lost control of the bentopdf namespace on Docker Hub. The bentopdf username/namespace may currently be in a released state, meaning it could potentially be registered by a third party.
Does anyone know how it affects the people using Bento through TrueNAS apps?
@alam@lemmy.world is also on the threadiverse, and may post updates about this as it develops
Thank you for sharing this, and apologies for not posting it here sooner. I will update it as soon as I receive any responses.
I see the original post got removed by moderators to prevent panic. Would you have an update that you can share in this thread? I’m happy to edit the title of this post too :)
Hello!
Our issue has been resolved. Our new version 1.16.1 now uses bentopdfteam/bentopdf and is the official account, and bentopdf/bentopdf is deprecated and not maintained anymore. GHCR is now the recommended source, and we have also added Podman Quadlet support.
Since I don’t want to spam by making another post I’d be happy if you could please edit this post. Thank you (:
Great to hear! I’ve updated the post title and linked to this comment
I guess they now have large enough number of users that it would be wise to shift some focus to supply-chain security from growth-hacking.
This is growing pains.
Called it.
https://feddit.online/post/1372107/comment/6758185
No one listen grug til chicken come to roost
Called what? That you didn’t like their use of emojis?
What does that have to do with this? You didn’t call shit.
I don’t read anything related in your linked post…
Honestly, you just come across as a self important jackass lol
Both can be true.
I think such character assessment and calling names is unnecessary and off-topic here though. Better engage with substance than judging by vibes and doing ad-hominem.
