Conversation

Notices

1. Embed this notice
   Mastodon Engineering (mastodonengineering@mastodon.social)'s status on Friday, 28-Feb-2025 01:42:14 JST Mastodon Engineering

   We just released Mastodon 4.3.4, 4.2.17 and 4.1.23. They contain bug fixes as well as security fixes (medium severity)

   We recommend every instance administrator to update as soon as possible.

   If you are using our nightly releases, a container image with the fix has been published with the `nightly.2025-01-27-security` tag.

   Full release notes and update instructions are available on our GitHub release page: https://github.com/mastodon/mastodon/releases/

   #mastoadmin

   • Embed this notice
     Mastodon Engineering (mastodonengineering@mastodon.social)'s status on Friday, 28-Feb-2025 01:43:19 JST Mastodon Engineering

     in reply to

     If you are running Mastodon 4.2: Mastodon 4.2.17 drops support for Ruby 3.0 (which is no longer supported upstream).

     If you are using Ruby 3.0, you can update to Mastodon 4.2.16 which contains the latest security fixes, but please note that this version has a known vulnerability if you are using SAML authentication with Mastodon.

     If you are running Mastodon 4.2 + Ruby 3.0, we strongly encourage you to update to Ruby 3.2 and Mastodon 4.2.17 or above.

     #mastoadmin

   • Embed this notice
     Mastodon Engineering (mastodonengineering@mastodon.social)'s status on Friday, 28-Feb-2025 01:43:43 JST Mastodon Engineering

     in reply to

     If you are running Mastodon 4.1, note that it only supports Ruby 3.0 (which is no longer supported upstream) and is subject to the above SAML security issue.

     Mastodon 4.1 will no longer receive patches (including for security issues) after 2024-04-08 and we strongly encourage you to update to a newer Mastodon version.

     #mastoadmin

   • Embed this notice
     Slontaker (slontaker@mastodon.social)'s status on Friday, 28-Feb-2025 02:45:02 JST Slontaker

     in reply to

     @MastodonEngineering

   • Embed this notice
     Rihards Olups (richlv@mastodon.social)'s status on Friday, 28-Feb-2025 07:25:45 JST Rihards Olups

     in reply to

     • Dmitry Golubev :verified:

     cc @lastguru