docs(vps): record Pangolin ee-1.25.3 / Traefik v3.7.16 upgrade #40

Merged

adam merged 1 commit from docs/vps-pangolin-1.25.3 into main

2026-10-23 21:50:00 -05:00

adam commented

2026-10-23 09:56:20 -05:00

Owner

Pangolin ee-1.24.0 → ee-1.25.3 and Traefik v3.7.13 → v3.7.16 on the VPS (applied live 2026-10-23).

Why: Node2Shell (CVE-2026-111497), a Brotli RCE in Node.js. Pangolin 1.24 ran Node 24.18.1 + Express 5 / body-parser 2, the exposed profile. 1.25.3 ships Node 24.22.1. Traefik bump covers the October advisories (most don't apply to this config).
Backup: /opt/pangolin/backup-pre-1.25.3-20261023-075226.tar.gz
Verified: migrations 1.25.0 + 1.25.3 ran OK, Badger still v1.7.0 and loaded, both newt sites reconnected, all 8 public routes return the same status as before.

This PR only updates hosts/vps/README.md (pinned versions, upgrade procedure, Docker-published UDP ports in the firewall table).

🤖 Generated with Claude Code

Pangolin `ee-1.24.0` → `ee-1.25.3` and Traefik `v3.7.13` → `v3.7.16` on the VPS (applied live 2026-10-23). - **Why:** Node2Shell (CVE-2026-111497), a Brotli RCE in Node.js. Pangolin 1.24 ran Node 24.18.1 + Express 5 / body-parser 2, the exposed profile. 1.25.3 ships Node 24.22.1. Traefik bump covers the October advisories (most don't apply to this config). - **Backup:** `/opt/pangolin/backup-pre-1.25.3-20261023-075226.tar.gz` - **Verified:** migrations 1.25.0 + 1.25.3 ran OK, Badger still v1.7.0 and loaded, both newt sites reconnected, all 8 public routes return the same status as before. This PR only updates `hosts/vps/README.md` (pinned versions, upgrade procedure, Docker-published UDP ports in the firewall table). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

adam added 1 commit

2026-10-23 09:56:20 -05:00

docs(vps): record Pangolin ee-1.25.3 / Traefik v3.7.16 upgrade 812813a737

Upgraded 2026-10-23 for Node2Shell (CVE-2026-111497) and the October
Traefik advisories. Pins current versions, documents the upgrade
procedure, and adds the Docker-published UDP ports to the firewall table.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

adam merged commit 3eae7d12f4 into main

2026-10-23 21:50:00 -05:00

adam referenced this pull request from a commit

2026-10-23 21:50:02 -05:00

Merge pull request 'docs(vps): record Pangolin ee-1.25.3 / Traefik v3.7.16 upgrade' (#40) from docs/vps-pangolin-1.25.3 into main