<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>OEJ · News</title><description>What changed, who is affected, and what you can do to protect your website.</description><link>https://oej.ee/</link><language>en</language><item><title>libtailscale could identify the wrong connection</title><link>https://oej.ee/en/news/libtailscale-wrong-peer-address/</link><guid isPermaLink="true">https://oej.ee/en/news/libtailscale-wrong-peer-address/</guid><description>The flaw affected applications embedding libtailscale, not standard Tailscale clients. Check the library and any decisions based on peer addresses.</description><pubDate>Tue, 27 Oct 2026 07:01:57 GMT</pubDate></item><item><title>Node.js security update: Brotli is not the only reason</title><link>https://oej.ee/en/news/nodejs-october-security-update/</link><guid isPermaLink="true">https://oej.ee/en/news/nodejs-october-security-update/</guid><description>The 21 October Node.js releases fix Brotli, DNS, TLS and other issues. Check the runtime actually serving your application, not just dependencies.</description><pubDate>Tue, 27 Oct 2026 07:01:57 GMT</pubDate></item><item><title>Tailscale’s certificate update: what does it fix?</title><link>https://oej.ee/en/news/tailscale-emudhra-certificate-update/</link><guid isPermaLink="true">https://oej.ee/en/news/tailscale-emudhra-certificate-update/</guid><description>Tailscale 1.104.2 distrusts compromised eMudhra certificates. This certificate update is not a fix for the later Tailworm research findings.</description><pubDate>Tue, 27 Oct 2026 07:01:57 GMT</pubDate></item><item><title>Tailworm: what the Tailscale research does and does not show</title><link>https://oej.ee/en/news/tailworm-tailscale-research-findings/</link><guid isPermaLink="true">https://oej.ee/en/news/tailworm-tailscale-research-findings/</guid><description>A researcher reports lab findings in Tailscale and headscale. Separate the tested conditions, the vendor response and the questions still open.</description><pubDate>Tue, 27 Oct 2026 07:01:57 GMT</pubDate></item><item><title>Does your website’s PHP version still receive security updates?</title><link>https://oej.ee/en/news/php-version-security-support/</link><guid isPermaLink="true">https://oej.ee/en/news/php-version-security-support/</guid><description>A working website does not tell you whether its software is still supported. Here is one question for your hosting provider.</description><pubDate>Mon, 26 Oct 2026 14:23:12 GMT</pubDate></item><item><title>PHP security update: what to ask your hosting provider</title><link>https://oej.ee/en/news/php-security-update-hosting-provider/</link><guid isPermaLink="true">https://oej.ee/en/news/php-security-update-hosting-provider/</guid><description>The patch may be installed while the website is still served by an old process. Here is what your hosting provider needs to verify.</description><pubDate>Mon, 26 Oct 2026 14:23:12 GMT</pubDate></item><item><title>WordPress is updated. What else should you check?</title><link>https://oej.ee/en/news/wordpress-security-beyond-updates/</link><guid isPermaLink="true">https://oej.ee/en/news/wordpress-security-beyond-updates/</guid><description>Website security does not end with a green update notice. Check extensions, access and the ability to restore the site.</description><pubDate>Mon, 26 Oct 2026 14:23:12 GMT</pubDate></item></channel></rss>