Discussion
We are planning to release new Mastodon security updates for versions 4.4, 4.5, 4.6, 4.7 and nightly this Thursday, Oct 29, at around 14:00 UTC.
It solves a critical severity security issue.
We encourage server administrators to plan for an update in the hours following the release to ensure their instance is protected. These versions will not require database migrations.
@MastodonEngineering Thanks for the heads-up — good to know these versions will not require database migrations. Is there anything server admins should check before the Thursday release, or is it a straightforward update?
@MastodonEngineering Stop doing these in the middle of the night, sigh.
@futzle @MastodonEngineering its always the middle of the night somewhere on this planet. i appreciate someone is making the effort to keep all the balls in the air, no matter what time it is.
@MastodonEngineering could you please make a mailing list for this so I can get email about coming security updates
@MastodonEngineering No migrations makes this a quick one. 14:00 UTC Thursday is 10 AM US Eastern, and on Docker installs it should come down to pulling the new image and restarting.
@MastodonEngineering
Ping @admin
Ça semble puer ce truc ...
@MastodonEngineering please add import passwords in android vivaldi
@MastodonEngineering The fact that I can send you this message is evidence that I am logged in to Mastodon. When I click on "Feedback" to give you feedback about what is wrong with Mastodon 5.0, it asks me to log in again. Homey don't play that game. Fix your broken feedback procedure, or tell me how to send you feedback in order to improve Mastodon 5.0, or keep your buggy product without improving it.
@RonSupportsYou @MastodonEngineering
Agree that being required to give your credentials to Discourse (ie. a VC owned corporate application) to provide feedback on the new UI is awkward and contrary to the principles of public social media. Can not understand what value added Discourse provides, when it should be possible to host this discussion within Mastodon.
@mastodonmigration @RonSupportsYou @MastodonEngineering I think you are confusing Discourse with Discord. Discourse is FLOSS and Mastodon has its own instance. You won't be giving your credentials to a VC owned corporation. Discord is a proprietary app that kinda sucks.
@not2b @RonSupportsYou @MastodonEngineering
Hmmm. Here is the Pitch Book entry for Discourse
https://pitchbook.com/profiles/company/55558-54#overview
Says it is like a VC owned US corporation, located in Dover DE
Install Fedizen
Get the full app experience
@MastodonEngineering if the release tag is predictable, we could have a list of commands to run automatically at certain time instead of waiting to read the release notes for specific instructions