search

hometown-fork / hometown

A supported fork of Mastodon that provides local posting and a wider range of content types.
GNU Affero General Public License v3.0
734 stars 56 forks source link

CVE-2023-28853 #1307

Closed jtracey closed 1 year ago

jtracey commented 1 year ago

https://github.com/mastodon/mastodon/security/advisories/GHSA-38g9-pfm9-gfqv https://github.com/mastodon/mastodon/pull/24379

Normally I'd reach out privately, but this is a well-known fork and the upstream advisory has already been public for a while now.

jtracey commented 1 year ago

You may also want to branch from the last release and make an emergency patch release.

jtracey commented 1 year ago

@dariusk

mistydemeo commented 1 year ago

It looks like this was applied in https://github.com/hometown-fork/hometown/releases/tag/v4.0.4%2Bhometown-1.1.1.