| |
I0OJJ > SYSOP 02.11.90 15:10l 80 Lines 3509 Bytes #999 (0) @ WW
BID : A5WUH_I0OJJ
Subj: Important Security Info from AllStarLink
Path: IW8PGT<HB9ON<HB9ON<PI8ZTM<IR0EQ<I0OJJ
Sent: 261102/1407z @:I0OJJ.ITA.EU [Rome] $:A5WUH_I0OJJ
>From i0ojj%i0ojj.ita.eu@rgate.ampr.org Mon Nov 2 15:09:24 2026
Received: from rgate.ampr.org by rgate.ampr.org (JNOS2.0q.1) with SMTP
id AA15147 ; Mon, 02 Nov 2026 15:09:24 +0100
Message-Id: <A5WUH_I0OJJ@i0ojj.bbs>
>From: i0ojj@i0ojj.ita.eu
X-JNOS-User-Port: Telnet (i0ojj @ 44.134.109.1) -> Sending message
>From i0ojj@i0ojj.ampr.org Mon Nov 2 15:07:02 2026
Received: from [44.134.109.10] by i0ojj.ampr.org (JNOS2.0q.1) with SMTP
id AA17072009 ; Mon, 02 Nov 2026 15:07:02 +0100
Message-ID: <56fe5083-01a7-4742-8bdb-68b8601a954c@i0ojj.ampr.org>
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
References: <010001a198891285-40bb6543-1cae-4436-888c-185a77616e6f-000000@email.amazonses.com>
Content-Language: en-US, it
>From: Gustavo Ponza <i0ojj@i0ojj.ampr.org>
Organization: SICD Rome
In-Reply-To: <010001a198891285-40bb6543-1cae-4436-888c-185a77616e6f-000000@email.amazonses.com>
X-Forwarded-Message-Id: <010001a198891285-40bb6543-1cae-4436-888c-185a77616e6f-000000@email.amazonses.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
For your information.
73, gustavo i0ojj
-------- Forwarded Message --------
Subject: Important Security Information from AllStarLink
Date: Sun, 1 Nov 2026 19:14:42 +0000
From: AllStarLink <noreply@contact.allstarlink.org>
Important Security Information from AllStarLink
Dear AllStarLink User,
As you may have seen in the tech news, a week or so ago, a major
vulnerability was announced that affected all versions of the PHP
programming language. Any system running PHP where its local website(s)
are available to the Internet is at extreme risk of your device being
compromised. While AllStarLink itself does not use PHP on Servers/Nodes,
many third-party applications our users install does. In this case, a
third-party application includes - but is not limited to - Supermon,
HamVOIP, AllScan, ASL Announcement Manager, and more.
*/_There is no remediation to this issue other than to upgrade your
operating systemâ€Ös PHP package_/*
* Users of AllStarLink v3 on a standard Debian system, Raspberry Pi
OS, or with the ASL3 Appliance image can simply make sure they are
running the latest software from the standard software updates
system. This can be done using the Cockpit Interface
<https://contact.allstarlink.org/link/5dc8677f-3242-4ad8-923d-7d98b246ee61/db16e1fa-1727-4077-957f-36c04ba6debe/eb2c093e-e797-4
01d-ad70-911195aefedf>
or the terminal command line
<https://contact.allstarlink.org/link/63dcc2f7-28b0-41e3-a524-3dd1e591bd4f/db16e1fa-1727-4077-957f-36c04ba6debe/eb2c093e-e797-4
01d-ad70-911195aefedf>.
* Users on legacy versions of software including ASL1, ASL2, “Limey”,
and “DIAL” should disable any inbound web access to your system. No
fix or update for these platforms will ever be available. Users
should consider an upgrade to ASL3.
* Users on legacy HamVOIP should disable inbound web access until a
fix is available or upgrade your system to ASL3.
* Users of specialized appliance devices such as a Clearnode or M1KE
should apply any updates provided by those vendors.
Additional help may be available from the AllStarLink Community
<https://contact.allstarlink.org/link/f3d721d0-c99c-41f9-bcdf-84763d1f0e08/db16e1fa-1727-4077-957f-36c04ba6debe/eb2c093e-e797-4
01d-ad70-911195aefedf>.
Thanks and stay safe online!
AllStarLink
------------------------------------------------------------------------
Read previous mail | Read next mail
| |
