⚠️ We have just released important security fixes for the #Mastodon server software. Versions 4.1.3, 4.0.5, 3.5.9, as well as a new nightly are available now to make upgrading quick and painless. Please upgrade as soon as possible!
GeorgePieVG likes this.
reshared this
fuomag9
in reply to Mastodon • • •Ismael Rodríguez
in reply to fuomag9 • • •@fuomag9
I use the prebuilt docker image ghcr.io/mastodon/mastodon:v4.1.3 , commenting "build: . in" in the docker-compose they provide, instead of building my own, it was literally 30 seconds to update.
Maybe that works for you?
fuomag9
in reply to Ismael Rodríguez • • •@pyreneer You pulled the container when it was already pushed, but the GitHub action that builds and uploads it took 2:15 hours which is not great, especially in case of critical security issues (it's possible to archive arbitrary code execution in any instance simply by making a toot...)
github.com/mastodon/mastodon/a…
Bump version to v4.1.3 · mastodon/mastodon@0d5781c
GitHubMelroy van den Berg
in reply to fuomag9 • • •Sven
in reply to fuomag9 • • •fuomag9
in reply to Sven • • •Sven
in reply to fuomag9 • • •Sven
in reply to fuomag9 • • •fuomag9
in reply to Sven • • •@sven it’s the same about docker. The issue here is on the mastodon’s side on slow building of containers. Furthermore, on a bare metal machine in case a dependency changes (and it did change here as well, afaik minimum node version is now 18) a simple version number change is not enough for instantly updating.
The security impact of running without containers remains
Filibert
in reply to Mastodon • • •Olaf Kolkman
in reply to Mastodon • • •If during the build phase on docker you encounter
```
Bundler::HTTPError Could not fetch specs from rubygems.org/ due to underlying error <Net::OpenTimeout: execution expired (rubygems.org/specs.4.8.gz)>
```
Then an unsatisfactory workaround is to temporarily disable IPv6 on your docker daemon.
RubyGems.org | your community gem host
rubygems.orgEph Levi
in reply to Mastodon • • •Sun Microdevil Pte Ltd
in reply to Mastodon • • •Zoe
in reply to Mastodon • • •fuomag9
in reply to Zoe • • •Zoe
in reply to fuomag9 • • •Meow.tar.gz :verified:
in reply to Mastodon • • •Matt 💩
in reply to Mastodon • • •Fábio Rodrigues Ribeiro
in reply to Mastodon • • •Sco
in reply to Mastodon • • •Stilic
in reply to Mastodon • • •What I did to fix this issue was to stop Mastodon, run `bundle install`, and restart it.
GunChleoc
in reply to Mastodon • • •Thanks for the new version!
The upgrade instructions still need some TLC though mastodon.scot/@gunchleoc/11066…
Kaz24
in reply to Mastodon • • •Bouncing1981
in reply to Mastodon • • •Fell 🔜 #FOSDEM
in reply to Mastodon • • •```
su - mastodon
cd live
git fetch && git checkout v4.1.3
bundle install
yarn install
sudo systemctl stop mastodon-web mastodon-streaming mastodon-sidekiq
sudo systemctl start mastodon-web mastodon-streaming mastodon-sidekiq
```
Axel Morgner
in reply to Mastodon • • •Ben CG 🕊️
in reply to Mastodon • • •.@Mastodon Is this for servers to upgrade, or for users? (hi i'm new.)
mastodon.social/@Mastodon/1106…
Mastodon
2023-07-06 15:39:54
kaitou
in reply to Mastodon • • •kev
in reply to Mastodon • • •Сандер (прошу, поправляйте мя)
in reply to Mastodon • • •Jan ☕🎼🎹☁️🏋️♂️
in reply to Mastodon • • •AstroHyde
in reply to Mastodon • • •Mikaela Caron 🦄
in reply to Mastodon • • •I have absolutely no idea how to update my server 😅
I built it kinda for fun, if anyone has any guides I’d love to see them thanks!
I pretty much followed this guide to set mine up (this was before there was the 1 click install)
linode.com/docs/guides/install…
Install a Mastodon Server on Ubuntu 20.04
LinodeDaniele Pantaleo 🦥
in reply to Mastodon • • •» server is patched already! ❤
Markus Udosson Bo
in reply to Mastodon • • •Jeroen Habets
in reply to Mastodon • • •updated mastodon.habets.dev/ to 4.1.3.
As always: upgrade went smooth as a whistle! Thanks!
シュガ人
in reply to Mastodon • • •Phil Rudland
in reply to Mastodon • • •As this is for server software, do we normal user have to do anything?
AZcoigreach
in reply to Mastodon • • •Beefy Goblin
in reply to Mastodon • • •Dr. Couts
in reply to Mastodon • • •Chewie
in reply to Mastodon • • •Steve Hill 🏴🇪🇺
in reply to Mastodon • • •⭐⭐ PABLO EL PICHACOSO 🇻🇪
in reply to Mastodon • • •PolarManne
in reply to Mastodon • • •Ali Van Zee
in reply to Mastodon • • •Eric Redegeld
in reply to Mastodon • • •uaparit Basstardo
in reply to Mastodon • • •Dennis1212
in reply to Mastodon • • •Vero Balderas Iglesias
in reply to Mastodon • • •Nancy Marguerite Anderson
in reply to Mastodon • • •Think Green
in reply to Mastodon • • •Oreo
in reply to Mastodon • • •Jeroen Habets
in reply to Mastodon • • •I just noticed 4.1.4 on github and upgraded (smooth as a whistle)
No post though...or did I miss it?
"This release addresses a few issues that were missed in the last security update and includes changelogs for both updates.
⚠️ It is a follow-up to the important 4.1.3 security release fixing multiple critical security issues (CVE-2023-36460, CVE-2023-36459)."
github.com/mastodon/mastodon/r…
Release v4.1.4 · mastodon/mastodon
GitHub