Security concerns

[ninjaef]

what’s the issue with the latest security concerns being pushed out to members and also via the mobile app?

Are we going to be indulged with what the issue is, what has caused it, how was/is/can it be caused, who by, for how long has it been prevalent, and what if any data has been breached (i.e. HA cloud service or other collected data).

Come on guys - we could do with the insight.

[finity]

Security Bulletin

 It has come to our attention that certain custom integrations have security issues and could potentially leak sensitive information. Home Assistant is not responsible for custom integrations and you use custom integrations at your own risk. The latest version of Home Assistant has extra protection to help secure your instance. Update your Home Assistant instance as soon as possible. To update Home Assistant, click on the Supervisor menu item to …

[ninjaef]

Read that and the push notifications, not an answer to the question. It is rather like saying “we have found a component in a car that might cause a problem so please buy the latest model”

Never mind.

I didn’t think we would get to root cause on this forum.

[tom_l]

It is standard practice to not release security issue details until the issue has been patched. This prevents further abuse.