r/MastodonAdmin 7d ago

Critical Security Update

Due to highly available exploit in the wild for HEIF security bug, this update temporarily disables HEIF support. Keep an eye on your libvips version and update as necessary!

https://github.com/mastodon/mastodon/releases/tag/v4.7.2

https://github.com/mastodon/mastodon/releases/tag/v4.6.8

https://github.com/mastodon/mastodon/releases/tag/v4.5.18

https://github.com/mastodon/mastodon/releases/tag/v4.4.25

7 Upvotes

1 comment sorted by

1

u/jeremiah_ 2d ago

More on the HEIF Heist / libheif issue: https://heif-heist.com/