202
EDIT: BentoPDF version 1.16.1 now uses bentopdfteam/bentopdf and is the official account, and bentopdf/bentopdf is deprecated and not maintained anymore (www.reddit.com)
submitted 7 months ago* (last edited 7 months ago) by otter@lemmy.ca to c/selfhosted@lemmy.world
18 comments fedilink hide all child comments

See this comment for the latest update: https://lemmy.ca/post/58815307/21337921

Original title: BentoPDF urgent security notice: do not pull or update

Original Post:

See the post in the link for the latest details. As of me making this post

Due to an error during an organization migration, we have temporarily lost control of the bentopdf namespace on Docker Hub. The bentopdf username/namespace may currently be in a released state, meaning it could potentially be registered by a third party.

all 19 comments
sorted by: hot top new old
[-] kumi@feddit.online 44 points 7 months ago* (last edited 7 months ago)

I guess they now have large enough number of users that it would be wise to shift some focus to supply-chain security from growth-hacking.

This is growing pains.

[-] otter@lemmy.ca 32 points 7 months ago* (last edited 7 months ago)

@alam@lemmy.world is also on the threadiverse, and may post updates about this as it develops

[-] alam@lemmy.world 12 points 7 months ago

Thank you for sharing this, and apologies for not posting it here sooner. I will update it as soon as I receive any responses.

[-] otter@lemmy.ca 4 points 7 months ago

Thank you!

[-] otter@lemmy.ca 2 points 7 months ago

I see the original post got removed by moderators to prevent panic. Would you have an update that you can share in this thread? I'm happy to edit the title of this post too :)

[-] alam@lemmy.world 2 points 7 months ago* (last edited 7 months ago)

Hello!

Our issue has been resolved. Our new version 1.16.1 now uses bentopdfteam/bentopdf and is the official account, and bentopdf/bentopdf is deprecated and not maintained anymore. GHCR is now the recommended source, and we have also added Podman Quadlet support.

Since I don't want to spam by making another post I'd be happy if you could please edit this post. Thank you (:

[-] otter@lemmy.ca 2 points 7 months ago

Great to hear! I've updated the post title and linked to this comment

[-] just_another_person@lemmy.world 11 points 7 months ago

Wuh oh

[-] dieTasse@feddit.org 2 points 7 months ago

Does anyone know how it affects the people using Bento through TrueNAS apps?

this post was submitted on 18 Jan 2026
202 points (99.5% liked)

Selfhosted

61827 readers
423 users here now

A place to share alternatives to popular online services that can be self-hosted without giving up privacy or locking you into a service you don't control.

Rules:

Detailed Rules Post

  1. Be civil.

  2. No spam.

  3. Posts are to be related to self-hosting.

  4. Don't duplicate the full text of your blog or readme if you're providing a link.

  5. Submission headline should match the article title.

  6. No trolling.

  7. Promotion posts require active participation, with an account that is at least 30 days old. F/LOSS without a paywall has exceptions, with requirements. See the rules link for details. Tags [CBH] or [AIP] are required, see the links in Rule 8 for details.

  8. AI-related discussions and AI-involved promotional posts have additional requirements for tagging, as noted in Rule 7 and the AI & Promotional Post Expanded Rules post, and find example disclosures here.

Resources:

Any issues on the community? Report it using the report flag.

Questions? DM the mods!

founded 3 years ago
MODERATORS
ruud@lemmy.world
Loki@lemmy.world
CannaVet@lemmy.world
devve@lemmy.world
ayyy@sh.itjust.works
curbstickle@anarchist.nexus
curbstickle_lw@lemmy.world