← Feed

Posts

• View post

  Security release: Mastodon 4.7.5 is out Security fixes · New features · Bug fixes Changelog: Security: Fix password authentication bypass for inactive accounts (GHSA-3xjw-gv43-3w62); Fix DoS through JSON-LD compaction (#41482 by @ClearlyClaire, GHSA-cf49-73r7-rxj6); Fix Forwarded header taking precedence over X-Forwarded-For (#41481 by @ClearlyClaire,… 15 of 8,678 Mastodon servers already run it. Release notes: github.com/mastodon/mastodon/releases/tag/v4.7.5 fedidb.com/software/mastodon/ve...

• View post

  Security release: Mastodon 4.7.4 is out Security fixes · New features · Bug fixes Upgrade overview: This release contains upgrade notes that deviate from the norm: ℹ️ Default Ruby version has been updated ℹ️ Requires assets recompilation For more information, view the complete release notes and scroll down to the upgrade instructions section. Changelog:… 10 of 8,679 Mastodon servers already run it. Release notes: github.com/mastodon/mastodon/releases/tag/v4.7.4 fedidb.com/software/mastodon/ve...

• View post

  WordPress 9.4.0 is out New features · Bug fixes What's Changed: Fix: constrain image sizes in email notifications by @faisalahammad in github.com/Automattic/wordpress-activitypub/pull/3637; Federate enclosures that are not in the media library by @pfefferle in… 15,807 WordPress servers can upgrade. Release notes: github.com/Automattic/wordpress-activitypub/releases/tag/9.4.0 fedidb.com/software/wordpress/versions

• View post

  Security release: Loops 1.0.0-beta.15 is out Security fixes · New features · Bug fixes Security and Notes: Our primary docker image was updated to 5.0.2 - github.com/serversideup/docker-php/releases/tag/v5.0.2 (this includes the PHP security patching for 2 CVEs). Details here: php.net/archive/2026.php#2026-10-21-5; ; Rebuilt release images… 23 of 22 Loops servers already run it. Release notes: github.com/joinloops/loops-server/releases/tag/v1.0.0-beta.15 fedidb.com/software/loops/versions

• View post

  Pixelfed 0.15.1 is out New features What's Changed: Updated the language files based on the latest updates from Crowdin.; Update dependency laravel/framework to v13.37.0 by @renovate[bot] in github.com/pixelfed/pixelfed/pull/7726; Upgrade Notes: Official Docker upgrade guide: For people coming from git… 87 of 658 Pixelfed servers already run it. Release notes: github.com/pixelfed/pixelfed/releases/tag/v0.15.1 fedidb.com/software/pixelfed/versions

• View post

  Security release: Hollo 0.8.16 is out Security fixes Released on October 17, 2026. Fixed a security vulnerability where any authenticated user with the write:statuses scope could delete another local account's post or a cached remote post by its UUID and receive the deleted post's contents. Status deletion now requires the post… 38 Hollo servers can upgrade. Release notes: github.com/fedify-dev/hollo/releases/tag/0.8.16 fedidb.com/software/hollo/versions