Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • Bookmarks
  • Search
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo

Cloudron Forum

Apps | Demo | Docs | Install
  1. Cloudron Forum
  2. Mastodon
  3. Mastodon security update 4.1.3

Mastodon security update 4.1.3

Scheduled Pinned Locked Moved Solved Mastodon
14 Posts 6 Posters 2.6k Views 5 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • nichu42N nichu42

    "⚠️ We are planning to release important security fixes for #Mastodon on July 6th, between 13:00 and 15:00 UTC. They will be available for the 4.1, 4.0 and 3.5 versions as well as a nightly release, to make the upgrade as small and painless for everyone as possible. Be ready to upgrade!"
    https://mastodon.social/@Mastodon/110644992947398414

    N Offline
    N Offline
    nomadgeek
    wrote on last edited by
    #2

    @nichu42 came here to share. this.
    Hope we get packages quickly with my thanks.

    1 Reply Last reply
    2
    • R Offline
      R Offline
      redegelde
      wrote on last edited by
      #3

      Just received this mail from join Mastodon.

      As you may be aware, we are going to release critical security updates on July 6th, between 13:00 UTC and 15:00 UTC.

      These updates will be available as 4.1.3, 4.0.5, and 3.5.9, and the fixes will also be merged into the main branch and in a Docker build tagged nightly-2023-07-06-security.

      Those updates address critical security issues that were uncovered during a security audit, and we have no reason to believe have been exploited in the wild.

      If your server is managed by masto.host, fedi.monster, or Spacebear, you have nothing to do, as we are already in contact with them

      1 Reply Last reply
      3
      • nichu42N Offline
        nichu42N Offline
        nichu42
        wrote on last edited by
        #4

        Here we go 🙂
        https://github.com/mastodon/mastodon/releases/tag/v4.1.3

        Matrix: @nichu42:blueplanet.social

        A 1 Reply Last reply
        1
        • nichu42N nichu42

          Here we go 🙂
          https://github.com/mastodon/mastodon/releases/tag/v4.1.3

          A Offline
          A Offline
          alwynispat
          wrote on last edited by
          #5

          @nichu42 tagging @nebulon

          Find me at Mastodon

          1 Reply Last reply
          0
          • N Offline
            N Offline
            nomadgeek
            wrote on last edited by
            #6

            Has anyone @Cloudron acknowledged this? Do we have an ETA on the update?

            1 Reply Last reply
            0
            • girishG Offline
              girishG Offline
              girish
              Staff
              wrote on last edited by
              #7

              You can always track https://git.cloudron.io/cloudron/mastodon-app/

              (but yes, it's getting updated as we speak)

              nichu42N 1 Reply Last reply
              1
              • N Offline
                N Offline
                nomadgeek
                wrote on last edited by
                #8

                Awesome! Thanks for the update.

                1 Reply Last reply
                0
                • girishG girish

                  You can always track https://git.cloudron.io/cloudron/mastodon-app/

                  (but yes, it's getting updated as we speak)

                  nichu42N Offline
                  nichu42N Offline
                  nichu42
                  wrote on last edited by
                  #9

                  Thanks @girish - it'll be funny to see if Cloudron or the official Docker image will be completed first. You can still win the race 😉
                  Mastodon announced that they will publish details about the security issues after they have released the Docker image.

                  Matrix: @nichu42:blueplanet.social

                  1 Reply Last reply
                  0
                  • girishG Offline
                    girishG Offline
                    girish
                    Staff
                    wrote on last edited by girish
                    #10

                    It's out now.

                    edit: did I win 😄 ?

                    nichu42N doodlemania2D 2 Replies Last reply
                    4
                    • girishG girish

                      It's out now.

                      edit: did I win 😄 ?

                      nichu42N Offline
                      nichu42N Offline
                      nichu42
                      wrote on last edited by
                      #11

                      @girish Yes, you did! 🏆 🥇
                      Thanks for the excellent work!

                      Matrix: @nichu42:blueplanet.social

                      1 Reply Last reply
                      2
                      • N Offline
                        N Offline
                        nomadgeek
                        wrote on last edited by
                        #12

                        Yep! All updated here. Thanks for your quick push.

                        1 Reply Last reply
                        0
                        • girishG girish

                          It's out now.

                          edit: did I win 😄 ?

                          doodlemania2D Offline
                          doodlemania2D Offline
                          doodlemania2
                          App Dev
                          wrote on last edited by
                          #13

                          @girish totally won!

                          1 Reply Last reply
                          1
                          • nebulonN nebulon marked this topic as a question on
                          • nebulonN nebulon has marked this topic as solved on
                          • nichu42N Offline
                            nichu42N Offline
                            nichu42
                            wrote on last edited by
                            #14

                            @girish next one
                            https://github.com/mastodon/mastodon/releases/tag/v4.1.4

                            Matrix: @nichu42:blueplanet.social

                            1 Reply Last reply
                            2
                            Reply
                            • Reply as topic
                            Log in to reply
                            • Oldest to Newest
                            • Newest to Oldest
                            • Most Votes


                            • Login

                            • Don't have an account? Register

                            • Login or register to search.
                            • First post
                              Last post
                            0
                            • Categories
                            • Recent
                            • Tags
                            • Popular
                            • Bookmarks
                            • Search