4.1.3 - Githubissues

widdix / mastodon-on-aws

Host your own Mastodon instance on AWS

https://cloudonaut.io/mastodon-on-aws/

136 stars 27 forks source link

4.1.3 #40

Closed vzaliva closed 11 months ago

vzaliva commented 12 months ago

There is a critical security update in 4.1.3:

Two vulnerabilities are considered CRITICAL:

XSS through oEmbed preview cards (CVE-2023-36459)
Arbitrary file creation through media attachments (CVE-2023-36460) The full list is available on GitHub: https://github.com/mastodon/mastodon/security

Please update to 4.1.3.

pegli commented 12 months ago

4.1.4 was just released (https://github.com/mastodon/mastodon/releases/tag/v4.1.4). I'm going to run the stack in a few hours, and if things go well, I'll send a PR for 4.1.4.

pegli commented 12 months ago

PR sent. I tested by updating my instance, https://montereybay.social/. No issues during the upgrade nor have I seen any problems with initial testing via the web client and Ivory.

andreaswittig commented 12 months ago

@pegli Thanks a lot for your contribution!

compuguy commented 11 months ago

I think this issue can be close now since the docker image has been changed to 4.1.4 @vzaliva...