Aller directement au contenu
  • Catégories
  • Récent
  • Mots-clés
  • Populaire
  • Web
  • Utilisateurs
  • Groupes
Habillages
  • Clair
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Sombre
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Défaut (Aucun habillage)
  • Aucun habillage
Réduire

NodeBB

fariasF

farias

@farias
Se désabonner S'abonner
À propos
Messages
794
Sujets
313
Partages
0
Groupes
0
Abonnés
4
Abonnements
15

Messages

Récent Meilleur sujets Contesté

  • DoS de l'IP 94.23.61.165 : OVH SAS
    fariasF farias

    Report fait : https://www.ovhcloud.com/en/abuse/?validation_uuid=ce4dbaeb-ef3a-4966-b35b-5f5800dc9720

    Scan Attack

  • DoS de l'IP 94.23.61.165 : OVH SAS
    fariasF farias

    https://git.cyber-neurones.org/farias/AttackOnProxmox/src/branch/main/2026/AttackProxmox2026-07-30.md

    Scan Attack

  • Proxmox Balkany (update)
    fariasF farias

    Update :

    image.png

    Announcements proxmox update

  • NodeBB (update)
    fariasF farias

    Toujours la même erreur :

    # ./nodebb upgrade
    
    Updating NodeBB...
    
    1. Updating package.json file with defaults...  OK
    
    2. Bringing base dependencies up to date...  started
    npm notice run nodebb@4.14.6 postinstall
    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
    
    changed 4 packages, and audited 833 packages in 10s
    
    129 packages are looking for funding
      run `npm fund` for details
    
    8 vulnerabilities (1 moderate, 7 high)
    
    To address issues that do not require attention, run:
      npm audit fix
    
    To address all issues (including breaking changes), run:
      npm audit fix --force
    
    Run `npm audit` for details.
    
    3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
    
    A total of 2 package(s) can be upgraded:
    
      * @nodebb/nodebb-plugin-reactions (3.0.3 -> 3.0.4)
      * nodebb-plugin-feed (4.0.1 -> 4.0.3)
    
    Proceed with upgrade (y|n)? y
    
    Upgrading packages...
    
    4. Updating NodeBB data store schema...
    Parsing upgrade scripts... 
    OK | 0 script(s) found, 182 skipped
    Schema update complete!
    
    
    5. Rebuilding assets...  started
    2026-08-04T06:20:09.785Z [4567/57604] - info: [build] Building in parallel mode
    2026-08-04T06:20:09.787Z [4567/57604] - info: [build]         plugin static dirs  build started
    2026-08-04T06:20:09.787Z [4567/57604] - info: [build]          requirejs modules  build started
    2026-08-04T06:20:09.788Z [4567/57604] - info: [build]           client js bundle  build started
    2026-08-04T06:20:09.788Z [4567/57604] - info: [build]            admin js bundle  build started
    2026-08-04T06:20:09.789Z [4567/57604] - info: [build]         client side styles  build started
    2026-08-04T06:20:09.789Z [4567/57604] - info: [build] admin control panel styles  build started
    2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  templates  build started
    2026-08-04T06:20:09.791Z [4567/57604] - info: [build]                  languages  build started
    2026-08-04T06:20:10.316Z [4567/57604] - info: [build]         plugin static dirs  build completed in 0.528sec
    2026-08-04T06:20:11.821Z [4567/57604] - info: [build]           client js bundle  build completed in 2.033sec
    2026-08-04T06:20:11.821Z [4567/57604] - info: [build]            admin js bundle  build completed in 2.033sec
    2026-08-04T06:20:15.137Z [4567/57604] - info: [build]          requirejs modules  build completed in 5.35sec
    2026-08-04T06:20:15.138Z [4567/57604] - info: [build] Bundling with Webpack.
    [10%] building (0/0 modules)
    2026-08-04T06:20:16.987Z [4567/57604] - info: [build]         client side styles  build completed in 7.197sec
    [10%] building (23/245 modules)
    [10%] building (411/496 modules)
    338 assets
    541 modules
    
    ERROR in ./build/public/scripts-client.js 3435:5
    Module parse failed: Unexpected token (3435:5)
    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
    | });
    | 
    > ;CC0 1.0 Universal
    | 
    | Statement of Purpose
    
    webpack 5.108.4 compiled with 1 error in 10848 ms
    2026-08-04T06:20:27.656Z [4567/57604] - info: [build] Asset compilation successful. Completed in 17.861sec.
    
    
                                                                                                  NodeBB Upgrade Complete!
    
    
    
    Announcements update nodebb

  • Blocage du jours
    fariasF farias
    # grep "wp-login.php" /var/log/apache2/access.*.log.1 | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
          4 91.246.51.140
          6 165.231.121.77
          6 191.102.165.71
         22 2.57.23.72
         24 38.253.224.3
         58 178.128.84.251
       1454 139.162.58.217
       1472 165.22.58.190
       1868 139.162.58.164
       4216 172.104.172.245
    
    Scan Attack

  • Blocage du jours
    fariasF farias
    
    # grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
          2 135.136.48.43
          2 135.136.48.45
          2 45.3.47.220
          2 52.238.199.152
          2 95.182.90.246
          3 68.221.186.136
          5 135.136.48.73
          8 135.136.48.188
        310 104.234.4.3
        482 217.60.241.250
    
    Scan Attack

  • NodeBB (update)
    fariasF farias

    Toujours pareil …

    # npx npm-check-updates -u 
    npm notice run nodebb@4.14.4 npx
    npm notice run 'ncu' -u
    Upgrading /home/farias/nodebb/package.json
    [====================] 164/164 100%
    
    Patch   Backwards-compatible bug fixes
     @fortawesome/fontawesome-free   7.3.0  →   7.3.1
     @json2csv/node                  7.0.6  →   7.0.7
     autoprefixer                   10.5.2  →  10.5.4
     nodebb-plugin-2factor           8.0.1  →   8.0.5
     nodebb-plugin-emoji            6.0.14  →  6.0.16
     nodebb-plugin-markdown         13.2.6  →  13.2.7
     nodebb-plugin-spam-be-gone      2.3.4  →   2.3.5
     nodebb-widget-essentials        8.0.4  →   8.0.5
     postcss-clean                   1.2.0  →   1.2.2
     sanitize-html                  2.17.5  →  2.17.6
    
    Minor   Backwards-compatible features
     @fontsource/inter        5.2.8  →    5.3.0
     @fontsource/poppins      5.2.7  →    5.3.0
     fs-extra                11.3.6  →   11.4.0
     globals                 17.7.0  →   17.8.0
     helmet                   8.2.0  →    8.3.0
     lint-staged             17.0.8  →   17.2.0
     nodebb-theme-lavender    8.0.6  →    8.1.0
     nodebb-theme-peace       3.0.6  →    3.1.1
     sass                   1.101.0  →  1.102.0
     spdx-license-list       6.11.0  →   6.12.0
     undici                   8.7.0  →    8.9.0
     webpack                5.108.4  →  5.109.2
     yargs                   18.0.0  →   18.1.0
    
    Major   Potentially breaking API changes
     @apidevtools/swagger-parser       10.1.0  →   12.1.0
     @nodebb/nodebb-plugin-user-level  ^1.0.2  →   ^3.0.0
     chalk                              5.6.2  →    6.0.0
     connect-redis                      9.0.0  →   10.0.0
     cropperjs                          1.6.2  →    2.1.1
     express                           4.22.2  →    5.2.1
     grunt-contrib-watch               ^0.4.4  →   ^1.1.0
     husky                              8.0.3  →    9.1.7
     jquery                             3.7.1  →    4.0.0
     jsdom                             29.1.1  →   30.0.1
     mocha                             ^8.1.3  →  ^11.7.6
     nodebb-plugin-dbsearch            ^3.0.8  →   ^7.0.0
     redis                             5.12.1  →    6.1.0
    
    Major version zero   Anything may change
     @fontsource-utils/scss   0.2.2  →   0.2.4
     nodebb-plugin-web-push   0.8.1  →   0.9.2
     satori                  0.26.0  →  0.29.0
    
    Run npm install to install new versions.
    
    
    # npm install 
    npm warn deprecated raw-body@1.1.7: No longer maintained. Please upgrade to a stable version.
    npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    npm notice run nodebb@4.14.4 postinstall
    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
    npm notice run nodebb@4.14.4 npx
    npm notice run 'husky' install
    husky - install command is DEPRECATED
    
    added 89 packages, removed 70 packages, changed 78 packages, and audited 1255 packages in 36s
    
    204 packages are looking for funding
      run `npm fund` for details
    
    22 vulnerabilities (1 low, 6 moderate, 13 high, 2 critical)
    
    To address all issues possible (including breaking changes), run:
      npm audit fix --force
    
    Some issues need review, and may require choosing
    a different dependency.
    
    Run `npm audit` for details.
    
    
    # npx npm-check-updates
    npm notice run nodebb@4.14.4 npx
    npm notice run 'ncu'
    Checking /home/farias/nodebb/package.json
    [====================] 164/164 100%
    All dependencies match the latest package versions :)
    
    # ./nodebb stop
    Dependencies outdated or not yet installed. Error Code: DEP_WRONG_VERSION
    TypeError: Incorrect dependency version: chalk
        at checkVersion (/home/farias/nodebb/src/cli/index.js:41:14)
        at Object.<anonymous> (/home/farias/nodebb/src/cli/index.js:50:2)
        at Module._compile (node:internal/modules/cjs/loader:1871:14)
        at Object..js (node:internal/modules/cjs/loader:2002:10)
        at Module.load (node:internal/modules/cjs/loader:1594:32)
        at Module._load (node:internal/modules/cjs/loader:1396:12)
        at wrapModuleLoad (node:internal/modules/cjs/loader:255:19)
        at Module.require (node:internal/modules/cjs/loader:1617:12)
        at require (node:internal/modules/helpers:153:16)
        at Object.<anonymous> (/home/farias/nodebb/nodebb:5:1)
    Installing them now...
    
    npm notice run nodebb@4.14.4 postinstall
    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
    
    added 14 packages, removed 436 packages, changed 47 packages, and audited 833 packages in 18s
    
    129 packages are looking for funding
      run `npm fund` for details
    
    5 vulnerabilities (1 moderate, 4 high)
    
    To address all issues (including breaking changes), run:
      npm audit fix --force
    
    Run `npm audit` for details.
    OK
    
    Stopping NodeBB. Goodbye!
    
    
    # ./nodebb upgrade
    upgrade
    
    Updating NodeBB...
    
    1. Updating package.json file with defaults...  OK
    
    2. Bringing base dependencies up to date...  started
    npm notice run nodebb@4.14.4 postinstall
    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
    
    up to date, audited 833 packages in 6s
    
    129 packages are looking for funding
      run `npm fund` for details
    
    5 vulnerabilities (1 moderate, 4 high)
    
    To address all issues (including breaking changes), run:
      npm audit fix --force
    
    Run `npm audit` for details.
    
    3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
    All packages up-to-date!
    
    4. Updating NodeBB data store schema...
    Parsing upgrade scripts... 
    OK | 0 script(s) found, 182 skipped
    Schema update complete!
    
    
    5. Rebuilding assets...  started
    2026-07-30T06:10:32.067Z [4567/25380] - info: [build] Building in parallel mode
    2026-07-30T06:10:32.072Z [4567/25380] - info: [build]         plugin static dirs  build started
    2026-07-30T06:10:32.073Z [4567/25380] - info: [build]          requirejs modules  build started
    2026-07-30T06:10:32.075Z [4567/25380] - info: [build]           client js bundle  build started
    2026-07-30T06:10:32.077Z [4567/25380] - info: [build]            admin js bundle  build started
    2026-07-30T06:10:32.077Z [4567/25380] - info: [build]         client side styles  build started
    2026-07-30T06:10:32.079Z [4567/25380] - info: [build] admin control panel styles  build started
    2026-07-30T06:10:32.083Z [4567/25380] - info: [build]                  templates  build started
    2026-07-30T06:10:32.084Z [4567/25380] - info: [build]                  languages  build started
    2026-07-30T06:10:32.976Z [4567/25380] - info: [build]         plugin static dirs  build completed in 0.904sec
    2026-07-30T06:10:34.210Z [4567/25380] - info: [build]            admin js bundle  build completed in 2.133sec
    2026-07-30T06:10:34.210Z [4567/25380] - info: [build]           client js bundle  build completed in 2.135sec
    2026-07-30T06:10:37.757Z [4567/25380] - info: [build]          requirejs modules  build completed in 5.684sec
    2026-07-30T06:10:37.758Z [4567/25380] - info: [build] Bundling with Webpack.
    [10%] building (0/0 modules)
    2026-07-30T06:10:39.384Z [4567/25380] - info: [build]         client side styles  build completed in 7.307sec
    [10%] building (17/233 modules)
    [10%] building (385/465 modules)
    338 assets
    541 modules
    
    ERROR in ./build/public/scripts-client.js 3435:5
    Module parse failed: Unexpected token (3435:5)
    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
    | });
    | 
    > ;CC0 1.0 Universal
    | 
    | Statement of Purpose
    
    webpack 5.108.4 compiled with 1 error in 8050 ms
    2026-07-30T06:10:47.164Z [4567/25380] - info: [build] Asset compilation successful. Completed in 15.09sec.
    
    
                                                                                                  NodeBB Upgrade Complete!
    
    # ./nodebb start
    
    Starting NodeBB
      "./nodebb stop" to stop the NodeBB server
      "./nodebb log" to view server output
      "./nodebb help" for more commands
    
    
    Announcements update nodebb

  • NodeBB (update)
    fariasF farias
    # npm audit fix --force
    npm warn using --force Recommended protections disabled.
    npm warn audit Updating postcss to 8.5.25, which is outside your stated dependency range.
    npm warn audit Updating @nodebb/nodebb-plugin-user-level to 1.0.2, which is a SemVer major change.
    npm warn audit Updating grunt to 1.6.3, which is outside your stated dependency range.
    npm warn audit Updating mocha to 11.3.0, which is a SemVer major change.
    npm warn audit Updating nodebb-plugin-dbsearch to 3.0.8, which is a SemVer major change.
    npm warn audit No fix available for coveralls@*
    npm warn audit Updating grunt-contrib-watch to 0.4.4, which is a SemVer major change.
    npm warn deprecated osenv@0.1.5: This package is no longer supported.
    npm warn deprecated inflight@1.0.6: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
    npm warn deprecated har-validator@5.1.5: this library is no longer supported
    npm warn deprecated glob@7.1.7: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    npm warn deprecated minimatch@0.4.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
    npm warn deprecated minimatch@0.2.14: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
    npm warn deprecated minimatch@0.3.0: Please update to minimatch 3.0.2 or higher to avoid a RegExp DoS issue
    npm warn deprecated uuid@3.4.0: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
    npm warn deprecated request@2.88.2: request has been deprecated, see https://github.com/request/request/issues/3142
    npm warn deprecated glob@3.2.11: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    npm warn deprecated glob@10.5.0: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
    
    added 405 packages, removed 17 packages, changed 11 packages, and audited 1243 packages in 26s
    
    202 packages are looking for funding
      run `npm fund` for details
    
    # npm audit report
    
    async  2.0.0 - 2.6.3
    Severity: high
    Prototype Pollution in async - https://github.com/advisories/GHSA-fwr7-v2mv-hh25
    fix available via `npm audit fix --force`
    Will install nodebb-plugin-dbsearch@7.0.0, which is a breaking change
    node_modules/nodebb-plugin-dbsearch/node_modules/async
      nodebb-plugin-dbsearch  2.0.0 - 4.0.7
      Depends on vulnerable versions of async
      node_modules/nodebb-plugin-dbsearch
    
    brace-expansion  <=5.0.7
    Severity: high
    brace-expansion: DoS via unbounded expansion length causing an out-of-memory process crash - https://github.com/advisories/GHSA-mh99-v99m-4gvg
    fix available via `npm audit fix --force`
    Will install mocha@8.1.3, which is a breaking change
    node_modules/brace-expansion
    node_modules/mocha/node_modules/brace-expansion
      minimatch  <=10.0.2
      Depends on vulnerable versions of brace-expansion
      node_modules/fileset/node_modules/glob/node_modules/minimatch
      node_modules/fileset/node_modules/minimatch
      node_modules/gaze/node_modules/minimatch
      node_modules/minimatch
      node_modules/mocha/node_modules/glob/node_modules/minimatch
      node_modules/mocha/node_modules/minimatch
        fileset  0.1.0 - 0.2.1
        Depends on vulnerable versions of glob
        Depends on vulnerable versions of minimatch
        node_modules/fileset
          gaze  <=0.3.4
          Depends on vulnerable versions of fileset
          Depends on vulnerable versions of minimatch
          node_modules/gaze
            grunt-contrib-watch  <=0.5.3 || 1.0.0 - 1.0.1
            Depends on vulnerable versions of gaze
            Depends on vulnerable versions of tiny-lr
            node_modules/grunt-contrib-watch
        glob  3.0.0 - 10.5.0
        Depends on vulnerable versions of minimatch
        Depends on vulnerable versions of minimatch
        node_modules/fileset/node_modules/glob
        node_modules/glob
        node_modules/mocha/node_modules/glob
          grunt  >=1.0.0-rc1
          Depends on vulnerable versions of glob
          Depends on vulnerable versions of minimatch
          node_modules/grunt
          mocha  3.0.0-0 - 12.0.0-beta-9
          Depends on vulnerable versions of glob
          Depends on vulnerable versions of minimatch
          Depends on vulnerable versions of serialize-javascript
          node_modules/mocha
    
    debug  <=2.6.8
    Severity: high
    debug Inefficient Regular Expression Complexity vulnerability - https://github.com/advisories/GHSA-9vvw-cc9w-f27h
    Regular Expression Denial of Service in debug - https://github.com/advisories/GHSA-gxpj-cx7g-858c
    fix available via `npm audit fix --force`
    Will install grunt-contrib-watch@1.1.0, which is a breaking change
    node_modules/tiny-lr/node_modules/debug
      tiny-lr  <=1.0.4
      Depends on vulnerable versions of debug
      Depends on vulnerable versions of qs
      node_modules/tiny-lr
    
    form-data  <=2.5.5
    Severity: critical
    form-data uses unsafe random function in form-data for choosing boundary - https://github.com/advisories/GHSA-fjxv-7rqg-78g4
    form-data: CRLF injection in form-data via unescaped multipart field names and filenames - https://github.com/advisories/GHSA-hmw2-7cc7-3qxx
    No fix available
    node_modules/form-data
      request  *
      Depends on vulnerable versions of form-data
      Depends on vulnerable versions of qs
      Depends on vulnerable versions of tough-cookie
      Depends on vulnerable versions of uuid
      node_modules/request
        coveralls  *
        Depends on vulnerable versions of request
        node_modules/coveralls
    
    
    qs  <=6.14.0
    Severity: high
    Prototype Pollution Protection Bypass in qs - https://github.com/advisories/GHSA-gqgv-6jq5-jjj9
    Denial-of-Service Extended Event Loop Blocking in qs - https://github.com/advisories/GHSA-f9cm-p3w6-xvr3
    Denial-of-Service Memory Exhaustion in qs - https://github.com/advisories/GHSA-jjv7-qpx3-h62q
    qs vulnerable to Prototype Pollution - https://github.com/advisories/GHSA-hrpp-h998-j3pp
    qs's arrayLimit bypass in its bracket notation allows DoS via memory exhaustion - https://github.com/advisories/GHSA-6rw7-vpxm-498p
    fix available via `npm audit fix --force`
    Will install grunt-contrib-watch@1.1.0, which is a breaking change
    node_modules/request/node_modules/qs
    node_modules/tiny-lr/node_modules/qs
    
    
    serialize-javascript  <=7.0.4
    Severity: high
    Serialize JavaScript is Vulnerable to RCE via RegExp.flags and Date.prototype.toISOString() - https://github.com/advisories/GHSA-5c6j-r48x-rmvq
    Serialize JavaScript has CPU Exhaustion Denial of Service via crafted array-like objects - https://github.com/advisories/GHSA-qj8w-gfj5-8c6v
    fix available via `npm audit fix --force`
    Will install mocha@8.1.3, which is a breaking change
    node_modules/serialize-javascript
    
    tough-cookie  <4.1.3
    Severity: moderate
    tough-cookie Prototype Pollution vulnerability - https://github.com/advisories/GHSA-72xf-g2v4-qvf3
    No fix available
    node_modules/request/node_modules/tough-cookie
    
    uuid  <11.1.1
    Severity: moderate
    uuid: Missing buffer bounds check in v3/v5/v6 when buf is provided - https://github.com/advisories/GHSA-w5hq-g745-h8pq
    No fix available
    node_modules/uuid
    
    19 vulnerabilities (3 moderate, 14 high, 2 critical)
    
    To address all issues possible (including breaking changes), run:
      npm audit fix --force
    
    Some issues need review, and may require choosing
    a different dependency.
    
    
    
    Announcements update nodebb

  • NodeBB (update)
    fariasF farias

    Misère.

    # npm install-scripts ls
    2 packages have install scripts blocked because they are not covered by allowScripts:
      @parcel/watcher@2.6.0 (install: node-gyp rebuild)
      snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
    # npm install-scripts approve @parcel/watcher@2.6.0
    Approved @parcel/watcher:
      removed-stale @parcel/watcher@2.5.1
      added @parcel/watcher@2.6.0
    # npm install-scripts approve snyk@1.1306.1
    Approved snyk:
      removed-stale snyk@1.1300.2
      added snyk@1.1306.1
    
    
    Announcements update nodebb

  • NodeBB (update)
    fariasF farias

    Toujours des problèmes lors de la mise à jours :

    # git fetch
    remote: Enumerating objects: 970, done.
    remote: Counting objects: 100% (349/349), done.
    remote: Compressing objects: 100% (82/82), done.
    remote: Total 970 (delta 293), reused 282 (delta 267), pack-reused 621 (from 3)
    Receiving objects: 100% (970/970), 827.77 KiB | 7.46 MiB/s, done.
    Resolving deltas: 100% (575/575), completed with 69 local objects.
    From https://github.com/NodeBB/NodeBB
       0f9b8fa67f..e9beb46935  develop                                  -> origin/develop
       5282092037..065c02dddf  master                                   -> origin/master
     + b7b8e22a21...60fc1e1db0 renovate/apidevtools-swagger-parser-12.x -> origin/renovate/apidevtools-swagger-parser-12.x  (forced update)
     + 27d3b4d9ba...bc6e529bbb renovate/cropperjs-2.x                   -> origin/renovate/cropperjs-2.x  (forced update)
     + 7df2a1b5d1...e7b2b0b0e1 renovate/husky-9.x                       -> origin/renovate/husky-9.x  (forced update)
     + 8e7903e29c...f202b4e96f renovate/jquery-4.x                      -> origin/renovate/jquery-4.x  (forced update)
     * [new branch]            renovate/jsdom-30.x                      -> origin/renovate/jsdom-30.x
     + 118255d0c7...2f3350c094 renovate/redis-6.x                       -> origin/renovate/redis-6.x  (forced update)
     * [new branch]            renovate/webpack-5.x                     -> origin/renovate/webpack-5.x
       217f6ed81c..c91bec416a  v4.x                                     -> origin/v4.x
     * [new tag]               v4.14.3                                  -> v4.14.3
     * [new tag]               v4.14.4                                  -> v4.14.4
    
    # git reset --hard  v4.14.4
    HEAD is now at 9f9a69acd2 chore: incrementing version number - v4.14.4
    
    # ./nodebb upgrade
    
    Updating NodeBB...
    
    1. Updating package.json file with defaults...  OK
    
    2. Bringing base dependencies up to date...  started
    npm notice run nodebb@4.14.4 postinstall
    npm notice run if [ "$NODE_ENV" != "production" ]; then npx husky install; fi
    
    changed 3 packages, and audited 855 packages in 10s
    
    137 packages are looking for funding
      run `npm fund` for details
    
    10 vulnerabilities (1 moderate, 9 high)
    
    To address issues that do not require attention, run:
      npm audit fix
    
    To address all issues (including breaking changes), run:
      npm audit fix --force
    
    Run `npm audit` for details.
    npm warn install-scripts 2 packages had install scripts blocked because they are not covered by allowScripts:
    npm warn install-scripts   @parcel/watcher@2.6.0 (install: node-gyp rebuild)
    npm warn install-scripts   snyk@1.1306.1 (postinstall: node wrapper_dist/bootstrap.js exec)
    npm warn install-scripts
    npm warn install-scripts Run `npm install-scripts ls` to review, or `npm install-scripts approve <pkg>` to allow.
    
    3. Checking installed plugins for updates...Checking installed plugins and themes for updates...   OK
    
    A total of 1 package(s) can be upgraded:
    
      * @nodebb/nodebb-plugin-reactions (3.0.2 -> 3.0.3)
    
    Proceed with upgrade (y|n)? y
    
    Upgrading packages...
    
    4. Updating NodeBB data store schema...
    Parsing upgrade scripts... 
    OK | 2 script(s) found, 180 skipped
      → [2026/7/28] Backfill trust_proxy for upgraded installs... OK (0.00 seconds)
      → [2026/7/29] Backfill trust_proxy into the config file specified via --config... OK (0.00 seconds)
    Schema update complete!
    
    
    5. Rebuilding assets...  started
    2026-07-30T05:58:17.922Z [4567/24107] - info: [build] Building in parallel mode
    2026-07-30T05:58:17.927Z [4567/24107] - info: [build]         plugin static dirs  build started
    2026-07-30T05:58:17.929Z [4567/24107] - info: [build]          requirejs modules  build started
    2026-07-30T05:58:17.930Z [4567/24107] - info: [build]           client js bundle  build started
    2026-07-30T05:58:17.932Z [4567/24107] - info: [build]            admin js bundle  build started
    2026-07-30T05:58:17.933Z [4567/24107] - info: [build]         client side styles  build started
    2026-07-30T05:58:17.934Z [4567/24107] - info: [build] admin control panel styles  build started
    2026-07-30T05:58:17.938Z [4567/24107] - info: [build]                  templates  build started
    2026-07-30T05:58:17.939Z [4567/24107] - info: [build]                  languages  build started
    2026-07-30T05:58:18.515Z [4567/24107] - info: [build]         plugin static dirs  build completed in 0.587sec
    2026-07-30T05:58:19.980Z [4567/24107] - info: [build]           client js bundle  build completed in 2.049sec
    2026-07-30T05:58:19.982Z [4567/24107] - info: [build]            admin js bundle  build completed in 2.05sec
    2026-07-30T05:58:24.069Z [4567/24107] - info: [build]          requirejs modules  build completed in 6.141sec
    2026-07-30T05:58:24.070Z [4567/24107] - info: [build] Bundling with Webpack.
    [10%] building (0/0 modules)
    [10%] building (1/19 modules)
    [10%] building (23/247 modules)
    [10%] building (351/424 modules)
    338 assets
    541 modules
    
    ERROR in ./build/public/scripts-client.js 3435:5
    Module parse failed: Unexpected token (3435:5)
    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
    | });
    | 
    > ;CC0 1.0 Universal
    | 
    | Statement of Purpose
    
    webpack 5.108.4 compiled with 1 error in 9148 ms
    2026-07-30T05:58:34.829Z [4567/24107] - info: [build] Asset compilation successful. Completed in 16.9sec.
    
    
                                                                                                  NodeBB Upgrade Complete!
    
    
    Announcements update nodebb

  • Référencement Google
    fariasF farias

    image.png

    image.png

    DSI

  • Blocage du jours
    fariasF farias
    # grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
          1 159.26.119.228
          1 20.189.123.229
          1 45.4.3.144
          1 85.10.16.50
          2 31.134.12.65
       1186 149.36.48.81
    
    Scan Attack

  • Blocage du jours
    fariasF farias
    # grep "wp-login.php" /var/log/apache2/access.*.log | sed 's/:/ /g' | awk '{print $2}' | sort -n | uniq -c | sort -n | tail -10
          1 185.198.240.253
          1 45.142.193.149
          1 74.248.139.103
          2 165.22.214.22
          2 52.238.192.78
        350 165.22.111.224
        584 172.237.87.100
       1710 161.33.167.35
       1848 188.166.237.142
    
    Scan Attack

  • NodeBB audit
    fariasF farias

    J’ai fait un post : https://community.nodebb.org/

    image.png

    Linux

  • NodeBB audit
    fariasF farias

    Plugins :

    
    # ./nodebb plugins
    Active plugins:
    	* @nodebb/nodebb-plugin-reactions@3.0.2 (installed, enabled)
    	* @nodebb/nodebb-plugin-user-level@3.0.0 (installed, enabled)
    	* @nodebb/nodebb-plugin-youtube-embed@1.0.0 (installed, enabled)
    	* nodebb-plugin-2factor@8.0.1 (installed, disabled)
    	* nodebb-plugin-composer-default@11.0.4 (installed, enabled)
    	* nodebb-plugin-dbsearch@7.0.0 (installed, enabled)
    	* nodebb-plugin-emoji@6.0.14 (installed, enabled)
    	* nodebb-plugin-emoji-android@4.1.1 (installed, disabled)
    	* nodebb-plugin-extended-markdown@2.1.1 (installed, enabled)
    	* nodebb-plugin-feed@4.0.1 (installed, enabled)
    	* nodebb-plugin-html5videoplayer@0.2.5 (installed, enabled)
    	* nodebb-plugin-imagemagick@3.0.0 (installed, disabled)
    	* nodebb-plugin-imgbed@3.0.0 (installed, enabled)
    	* nodebb-plugin-link-preview@2.2.8 (installed, enabled)
    	* nodebb-plugin-markdown@13.2.6 (installed, enabled)
    	* nodebb-plugin-mentions@5.0.0 (installed, enabled)
    	* nodebb-plugin-poll@4.0.15 (installed, enabled)
    	* nodebb-plugin-spam-be-gone@2.3.4 (installed, enabled)
    	* nodebb-plugin-web-push@0.8.1 (installed, enabled)
    	* nodebb-rewards-essentials@1.0.3 (installed, enabled)
    	* nodebb-theme-harmony@3.1.7 (installed, enabled)
    	* nodebb-theme-lavender@8.0.6 (installed, disabled)
    	* nodebb-theme-peace@3.0.6 (installed, disabled)
    	* nodebb-theme-persona@15.0.11 (installed, disabled)
    	* nodebb-widget-essentials@8.0.4 (installed, enabled)
    
    
    Linux

  • NodeBB audit
    fariasF farias

    Version of NodeBB : v4.14.2

    # ./nodebb log
    [cluster] Child Process (594665) has exited (code: 0, signal: null)
    
    NodeBB v4.14.2 Copyright (C) 2013-2026 NodeBB Inc.
    This program comes with ABSOLUTELY NO WARRANTY.
    This is free software, and you are welcome to redistribute it under certain conditions.
    For the full license, please visit: http://www.gnu.org/copyleft/gpl.html
    
    Clustering enabled: Spinning up 1 process(es).
    
    2026-07-27T05:29:55.357Z [4567/2024] - info: Initializing NodeBB v4.14.2 https://lemmy.cyber-neurones.org
    2026-07-27T05:30:19.527Z [4567/2024] - info: [socket.io] Restricting access to origin: https://lemmy.cyber-neurones.org:*
    video started
    2026-07-27T05:30:25.491Z [4567/2024] - info: [plugins/web-push] VAPID keys OK.
    2026-07-27T05:30:25.612Z [4567/2024] - info: Regex recompiled: (?<url>https?:\/\/[^\s]+\/(?<filename>[\w_0-9\-\.]+\.(jpg|jpeg|gif|gifv|png|svg))([^\s]*)?)
    2026-07-27T05:30:25.613Z [4567/2024] - info: Cache initialized to size 3
    2026-07-27T05:30:25.779Z [4567/2024] - info: [api] Adding 3 route(s) to `api/v3/plugins`
    2026-07-27T05:30:25.818Z [4567/2024] - info: [router] Routes added
    2026-07-27T05:30:25.898Z [4567/2024] - info: 🎉 NodeBB Ready
    2026-07-27T05:30:25.903Z [4567/2024] - info: 🤝 Setting 'trust proxy' to true
    2026-07-27T05:30:25.912Z [4567/2024] - info: 📡 NodeBB is now listening on: 0.0.0.0:4567
    2026-07-27T05:30:25.912Z [4567/2024] - info: 🔗 Canonical URL: https://lemmy.cyber-neurones.org
    

    Version NodeJS : v24.18.0

    # node -v 
    v24.18.0
    

    Version package : 12.0.1

    # npm list -g
    /usr/local/lib
    ├── corepack@0.35.0
    ├── n@10.2.0
    └── npm@12.0.1
    

    NPX :

    # npx npm-check-updates -u
    npm notice run nodebb@4.14.2 npx
    npm notice run 'ncu' -u
    Upgrading /home/farias/nodebb/package.json
    [====================] 164/164 100%
    All dependencies match the latest package versions :)
    

    Build : Issue with ./build/public/scripts-client.js

    # ./nodebb build
      started
    2026-07-27T06:49:22.321Z [4567/2873] - info: [build] Building in parallel mode
    2026-07-27T06:49:22.322Z [4567/2873] - info: [build]         plugin static dirs  build started
    2026-07-27T06:49:22.323Z [4567/2873] - info: [build]          requirejs modules  build started
    2026-07-27T06:49:22.323Z [4567/2873] - info: [build]           client js bundle  build started
    2026-07-27T06:49:22.324Z [4567/2873] - info: [build]            admin js bundle  build started
    2026-07-27T06:49:22.324Z [4567/2873] - info: [build]         client side styles  build started
    2026-07-27T06:49:22.324Z [4567/2873] - info: [build] admin control panel styles  build started
    2026-07-27T06:49:22.326Z [4567/2873] - info: [build]                  templates  build started
    2026-07-27T06:49:22.326Z [4567/2873] - info: [build]                  languages  build started
    2026-07-27T06:49:23.129Z [4567/2873] - info: [build]         plugin static dirs  build completed in 0.807sec
    2026-07-27T06:49:24.363Z [4567/2873] - info: [build]            admin js bundle  build completed in 2.039sec
    2026-07-27T06:49:24.363Z [4567/2873] - info: [build]           client js bundle  build completed in 2.04sec
    2026-07-27T06:49:29.967Z [4567/2873] - info: [build]          requirejs modules  build completed in 7.643sec
    2026-07-27T06:49:29.967Z [4567/2873] - info: [build] Bundling with Webpack.
    2026-07-27T06:49:30.084Z [4567/2873] - info: [build]         client side styles  build completed in 7.76sec
    2026-07-27T06:49:30.184Z [4567/2873] - info: [build] admin control panel styles  build completed in 7.859sec
    [10%] building (25/251 modules)
    [10%] building (400/491 modules)
    338 assets
    541 modules
    
    ERROR in ./build/public/scripts-client.js 3433:5
    Module parse failed: Unexpected token (3433:5)
    You may need an appropriate loader to handle this file type, currently no loaders are configured to process this file. See https://webpack.js.org/concepts#loaders
    | });
    | 
    > ;CC0 1.0 Universal
    | 
    | Statement of Purpose
    
    webpack 5.108.4 compiled with 1 error in 10716 ms
    2026-07-27T06:49:46.038Z [4567/2873] - info: [build] Asset compilation successful. Completed in 23.713sec.
    
    Linux

  • Proxmox Balkany (update)
    fariasF farias

    Reboot done :

    New kernel : Linux 7.0.14-6-pve (2026-07-20T14:45Z)

    image.png

    Announcements proxmox update

  • Proxmox Balkany (update)
    fariasF farias

    Reboot after 152 days :

    image.png

    Announcements proxmox update

  • Proxmox Balkany (update)
    fariasF farias

    Update :

    image.png

    Announcements proxmox update

  • dawarich (update)
    fariasF farias

    Encore une augmentation de la charge …

    image.png

    image.png

    Announcements
  • Se connecter

  • Vous n'avez pas de compte ? S'inscrire

  • Connectez-vous ou inscrivez-vous pour faire une recherche.
Powered by NodeBB Contributors
  • Premier message
    Dernier message
0
  • Catégories
  • Récent
  • Mots-clés
  • Populaire
  • Web
  • Utilisateurs
  • Groupes