XMPP Service Operators - 2026-05-22


  1. moparisthebest

    upgrade your unbound's immediately https://www.nlnetlabs.nl/projects/unbound/security-advisories/

  2. moparisthebest

    RCE when validating DNSSEC records among other things

  3. MattJ

    ^ this likely affects most Prosody deployments, because Prosody uses libunbound (which is the resolver code without the daemon)

  4. Kris

    Debian Trixie packages already available?

  5. sezuan

    https://security-tracker.debian.org/tracker/source-package/unbound - says no.

  6. sezuan

    seems that the version in bookworm is too told to be affected by the dnssec issue.

  7. Kris

    😓

  8. jjj333_p [pain.agency]

    > seems that the version in bookworm is too told to be affected by the dnssec issue. rare me not updating w?

  9. tom

    Openbsd https doesn't do the same things nginx does

  10. tom

    Openbsd httpd doesn't do the same things nginx does

  11. tom

    Its not a matter of switching