Back, with more to come!

"Moving into my new house will just take a month, and then I'll be back to posting!" I said to myself, with blind optimism.

... After 3 months, I would say I'm 80% moved in. The stuff I use on a daily basis is all moved into my new house, and for the most part unpacked. Stuff that I haven't needed to unpack (or unpacked, and then couldn't find a home for) has been boxed up and stored in the back loft. I still have some belongings in storage both in the town I used to live in, and near my new home (about 20 miles apart), and I'm slowly working on moving that stuff in while keeping my new home reasonably orderly.

As I logged in to start drafting posts I've been thinking about while planning and building the new homelab, I discovered that in addition to two new readers, I had a problem:

Security update available for Ghost 6.x
We’ve been made aware of a security vulnerability in Ghost versions up to v6.19.0. This is patched in v6.19.1, which has been released and rolled out on Ghost(Pro). Self-hosters should update to v6.19.1 as soon as possible. Details: A SQL injection vulnerability existed in Ghost’s Content API that allowed unauthenticated attackers to read arbitrary data from the database. Docker Image: The Docker image for v6.19.1 is available on Docker Hub here. We’re actively working on improving when and…

A security flaw was announced affecting the Ghost version running this blog

Time for an update.

First, I tried navigating into the menus to update. The 'Update Now' button brought me to instructions... But not ones that work when running Ghost in a docker container. My next option was to update the container running the blog, but after updating the image to ghost:latest, then directly to ghost:6.28-alpine (at time of writing, one of the most recent), the Ghost application was still indicating (both in the UI and the console) that it was running the original version I'd installed, now insecure and outdated.

The final option for updating a Ghost blog is to export the content, users, etc, create a new Ghost container with a clean install and database, and then import the content to the new install. I will follow up with another post from the new, updated blog later tonight 😀





Published by:



Subscribe for daily recipes. No spam, just food.