We just released Mastodon 4.3.3, 4.2.15 and 4.1.22. They contain a few bug fixes as well as a security fix (medium severity, https://github.com/mastodon/mastodon/security/advisories/GHSA-5wxh-3p65-r4g6)
We recommend every instance administrator to update as soon as possible.
If you are using our nightly releases, a container image with the fix has been published with the `nightly.2025-01-17-security` tag.
Full release notes and update instructions are available on our GitHub release page: https://github.com/mastodon/mastodon/releases/
@MastodonEngineering The first link cannot be opened (404).
@MastodonEngineering heya, the link to the security issue at the top of the release notes is a 404 error. (Sorry, probably 10 dozen people typing this same reply right now )
@yvan Did I forgot to publish the advisory? You cant prove it!
It should be available now :)
@renchap
Is that true? Just those 2 steps this time for the update? Nothing else with yarn or pre-compile?
Non-Docker only:
1. Install dependencies: bundle install
2. Restart all Mastodon processes
@waidler Yes, we try to not include frontend asset changes in security releases to ensure that the update is as simple as possible
@yvan @MastodonEngineering LOl was about to say that.
@MastodonEngineering Awesome, just updated my fresh new server.
Just saw this. And also saw that our instance sysad already put us on v4.3.3. Awesome!
@MastodonEngineering block meta block meta block meta block meta
@MastodonEngineering Bonjour. Je suis néophyte sur votre réseau (depuis le 20/01). J'aimerais trouver un "aide-memoire" ou un guide de l'utilisateur. Que me conseillez-vous ? Merci.