New and shiny Mastodon 4.1.x #154

New issue

Closed

opened 2023-02-16 09:32:25 +00:00 by benjaoming · 5 comments

benjaoming commented

2023-02-16 09:32:25 +00:00

Owner

Release notes:

https://github.com/mastodon/mastodon/releases/tag/v4.1.0

Release notes look relevant. However, I haven't studied if there is some huge new bug in this release that we should be aware of.

Release notes: https://github.com/mastodon/mastodon/releases/tag/v4.1.0 Release notes look relevant. However, I haven't studied if there is some huge new bug in this release that we should be aware of.

👍 1

samsapti added the

Existing Service

label 2023-02-16 16:28:08 +00:00

valberg commented

2023-04-09 08:01:00 +00:00

Owner

I've just got a update notification from https://social.data.coop/@update_notifications@mastodon.social with the following content:

Dear @valberg,
your server is running Mastodon 4.0.2, which is susceptible to an LDAP injection vulnerability that allows an attacker to read arbitrary attributes from the configured LDAP database.
Updating to a patched version is recommended if you are using LDAP for authentication.

Security advisory: https://github.com/mastodon/mastodon/security/advisories/GHSA-38g9-pfm9-gfqv

The latest version is 4.1.2 but the fix has also been backported to the 4.0.x branch.
Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.0.4

Have a nice day! :)

So yeah, we should probably update soon.

I've just got a update notification from https://social.data.coop/@update_notifications@mastodon.social with the following content: > Dear @valberg, > your server is running Mastodon 4.0.2, which is susceptible to an LDAP injection vulnerability that allows an attacker to read arbitrary attributes from the configured LDAP database. > Updating to a patched version is recommended if you are using LDAP for authentication. > > Security advisory: https://github.com/mastodon/mastodon/security/advisories/GHSA-38g9-pfm9-gfqv > > The latest version is 4.1.2 but the fix has also been backported to the 4.0.x branch. > Changelog: https://github.com/mastodon/mastodon/releases/tag/v4.0.4 > > Have a nice day! :) So yeah, we should probably update soon.