🚨 Mastodon security patch released

The Mastodon team has released new versions that fix major security issues.
It is strongly recommended that admins upgrade to the latest version of their branch ASAP.

More information about the security patches are available in the changelog:
4.1.8 https://github.com/mastodon/mastodon/releases/tag/v4.1.8
4.0.10 https://github.com/mastodon/mastodon/releases/tag/v4.0.10
3.5.14 https://github.com/mastodon/mastodon/releases/tag/v3.5.14
4.2.0-rc2 https://github.com/mastodon/mastodon/releases/tag/v4.2.0-rc2

⬇️ More info below

#MastoAdmin #FediAdmin

Three vulnerabilites are mentioned in the changelogs:
- Fix incorrect URL normalization (CVE-2023-42450)
GHSA-hcqf-fw2r-52g4: https://github.com/mastodon/mastodon/security/advisories/GHSA-hcqf-fw2r-52g4
- Fix missing HTML sanitization in translation API (CVE-2023-42452)
GHSA-2693-xr3m-jhqr: https://github.com/mastodon/mastodon/security/advisories/GHSA-2693-xr3m-jhqr
- Fix incorrect domain name normalization (CVE-2023-42451)
GHSA-v3xf-c9qf-j667: https://github.com/mastodon/mastodon/security/advisories/GHSA-v3xf-c9qf-j667

It seems that the security advisories on GitHub haven't been published yet.

#MastoAdmin #FediAdmin

New Mastodon bugfix releases

v4.1.9 & v4.0.11 have been released to fix a post translation issue that was introduced in yesterday's update

Check out the changelog for your branch:
4.1.9 https://github.com/mastodon/mastodon/releases/tag/v4.1.9
4.0.11 https://github.com/mastodon/mastodon/releases/tag/v4.0.11

#MastoAdmin #MastoDev

Mastodon v4.2.0 is officially released!

After months of development and testing, the v4.2 branch is ready for widespread deployment.

➡️ https://github.com/mastodon/mastodon/releases/tag/v4.2.0
🎉 Thanks to everyone who contributed and made this release possible!

The changelog provides a comprehensive list of changes, with the most important items highlighted.
Consult the Upgrade overview and Upgrade notes sections to learn more about upgrading to this version.

#MastoAdmin #MastoDev

A new blog post by @Gargron explains the most important user-facing changes in v4.2:
📰 https://blog.joinmastodon.org/2023/09/mastodon-4.2/

#MastoAdmin