We just released critical security patches for versions... | Mastodon Engineering

Mastodon's posts Post Back to profile

Mastodon Engineering

We just released critical security patches for versions 4.1, 4.2, nightly, and the already discontinued 3.5 and 4.0.

If you are using nightly, you can upgrade to the `4.3.0-nightly.2024-02-02-security` tag to get the patch.

Please upgrade as soon as possible!

Like 1 February at 15:19 | Open on mastodon.social

20 comments

@MastodonEngineering
Waiting on the github checks.

1 February at 15:24 | Open on cupoftea.social

Jan ☕🎼🎹☁️🏋️‍♂️

@MastodonEngineering Deployed!

1 February at 15:35 | Open on fedi.kcore.org

zeitverschreib [mastodon]

@MastodonEngineering Waiting for mastodon_ynh to catch up.

1 February at 15:57 | Open on social.zwoelfdreifuenfundvierzig.net

Stefano Marinelli

@MastodonEngineering Thank you. Deployed.

1 February at 16:01 | Open on mastodon.bsd.cafe

Team Star ☆ Siph :uva_academy:‍:team_star:

#LastBoost donphan.social now has the latest security patches for Mastodon

1 February at 16:03 | Open on donphan.social

DELETED

@MedibubbleServer Habt ihr das im Blick?

1 February at 16:18 | Open on medibubble.org

nen

@MastodonEngineering @rolle

1 February at 16:22 | Open on mementomori.social

Stefan aka DJ Speedy

@MastodonEngineering @stux 😱

1 February at 16:22 | Open on mstdn.social

@MastodonEngineering @admin

1 February at 16:22 | Open on kolektiva.social

@MastodonEngineering cc @godber

oof, it's a doozy:
https://github.com/mastodon/mastodon/security/advisories/GHSA-3fjr-858r-92rw

1 February at 16:32 | Open on az.social

@MastodonEngineering cc @esm

1 February at 16:41 | Open on wetdry.world

DELETED

@MastodonEngineering
https://rumble.com/v4amt4w-funny-cat-videos-compilation-funniest-cats-i-cat-video.html

1 February at 16:55 | Open on mas.to

Daniel Kay Media

@MastodonEngineering so, how does one upgrade?

1 February at 17:11 | Open on mastodon.sdf.org

Daniel Kay Media

@MastodonEngineering
where is the upgrade link? maybe supply that in your notification?

1 February at 17:13 | Open on mastodon.sdf.org

Roni Laukkarinen

@MastodonEngineering No such tag `4.3.0-nightly.2024-02-02-security` found though. Isn't today 1st of February as in 2024-02-01? That 02 is in the future.

I guess it's sufficient just to upgrade to the latest main that has alpha.1, right?

#MastoAdmin #Mastodon

1 February at 18:51 | Open on mementomori.social

Graham C

@MastodonEngineering great when are you going to provide help to users who have technical problems? Not much point using an app where I can only post text and there's no way of finding a solution

1 February at 19:40 | Open on mastodon.social

Dr. Motte

@MastodonEngineering what about iOS AppStore?

1 February at 20:32 | Open on mastodon.social

Eric de Redelijkheid :fedi:

@MastodonEngineering Who will tell truth.social?

1 February at 21:08 | Open on mastodon.nl

Salzi

@MastodonEngineering

1 February at 21:51 | Open on fosstodon.org

2 February at 0:05 | Open on mastodon.me.uk