🔔 Update Notifications(@update_notifications@mastodon.social)の投稿 Unofficial 
Mastodon update notifications.
Curated by a 🧍 human, but I occasionally send out 🤖 automated notifications.
DM this account if you want to opt out of notifications or have feedback. This bot respects the nobot hashtag in profile bios.
Our crawler respects exclusion rules in /robots.txt and can be identified by the following User-Agent:
UpdateNotificationBot/1.0 (+https://mastodon.social/@update_notifications)
#MastoAdmin #Mastodon #MastoDev #fedi22 searchable
New 
Mastodon release for the 3.5.x branch: Mastodon v3.5.13
Check out the changelog: https://github.com/mastodon/mastodon/releases/tag/v3.5.13
Please note that the 3.5.x branch will be discontinued at the end of this year, meaning that no further updates and fixes, including security fixes, will be made available after 2023-12-31.
Admins are encouraged to upgrade to a more recent branch, such as 4.1.x.
New Mastodon bugfix releases: Mastodon v4.1.7 / v4.0.9
Check out the changelog for your branch:
4.1.7 https://github.com/mastodon/mastodon/releases/tag/v4.1.7
4.0.9 https://github.com/mastodon/mastodon/releases/tag/v4.0.9
Please note that the 4.0.x branch will be discontinued 2023-10-31, meaning that no further updates and fixes, including security fixes, will be made available after that date.
Admins are encouraged to upgrade to the 4.1.x branch.
🚨 Mastodon security patch released
The Mastodon team has released new versions that fix major security issues.
It is strongly recommended that admins upgrade to the latest version of their branch ASAP.
More information about the security patches are available in the changelog:
4.1.8 https://github.com/mastodon/mastodon/releases/tag/v4.1.8
4.0.10 https://github.com/mastodon/mastodon/releases/tag/v4.0.10
3.5.14 https://github.com/mastodon/mastodon/releases/tag/v3.5.14
4.2.0-rc2 https://github.com/mastodon/mastodon/releases/tag/v4.2.0-rc2
⬇️ More info below
Three vulnerabilites are mentioned in the changelogs:
- Fix incorrect URL normalization (CVE-2023-42450)
GHSA-hcqf-fw2r-52g4: https://github.com/mastodon/mastodon/security/advisories/GHSA-hcqf-fw2r-52g4
- Fix missing HTML sanitization in translation API (CVE-2023-42452)
GHSA-2693-xr3m-jhqr: https://github.com/mastodon/mastodon/security/advisories/GHSA-2693-xr3m-jhqr
- Fix incorrect domain name normalization (CVE-2023-42451)
GHSA-v3xf-c9qf-j667: https://github.com/mastodon/mastodon/security/advisories/GHSA-v3xf-c9qf-j667
It seems that the security advisories on GitHub haven't been published yet.
New Mastodon bugfix releases
v4.1.9 & v4.0.11 have been released to fix a post translation issue that was introduced in yesterday's update
Check out the changelog for your branch:
4.1.9 https://github.com/mastodon/mastodon/releases/tag/v4.1.9
4.0.11 https://github.com/mastodon/mastodon/releases/tag/v4.0.11
Mastodon v4.2.0 is officially released!
After months of development and testing, the v4.2 branch is ready for widespread deployment.
➡️ https://github.com/mastodon/mastodon/releases/tag/v4.2.0
🎉 Thanks to everyone who contributed and made this release possible!
The changelog provides a comprehensive list of changes, with the most important items highlighted.
Consult the Upgrade overview and Upgrade notes sections to learn more about upgrading to this version.
A new blog post by @Gargron explains the most important user-facing changes in v4.2:
📰 https://blog.joinmastodon.org/2023/09/mastodon-4.2/
