Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

types.pl upgrade to v3.5.5 #8

Merged
merged 13 commits into from Nov 26, 2022
Merged

types.pl upgrade to v3.5.5 #8

merged 13 commits into from Nov 26, 2022

Conversation

ionathanch
Copy link
Collaborator

@ionathanch ionathanch commented Nov 17, 2022

Cherry-picked the glitch-soc commits corresponding to v3.5.5 on Mastodon (https://github.com/mastodon/mastodon/commits/v3.5.5), see #7 for deets
The five most recent commits cherry-picked are a security fix for the vulnerability described here: https://portswigger.net/research/stealing-passwords-from-infosec-mastodon-without-bypassing-csp

@ionathanch ionathanch changed the title types.pl upgrade to v3.5.5 (#7) types.pl upgrade to v3.5.5 (Issue #7) Nov 17, 2022
@ionathanch ionathanch changed the title types.pl upgrade to v3.5.5 (Issue #7) types.pl upgrade to v3.5.5 Nov 17, 2022
@ionathanch
Copy link
Collaborator Author

omfg WHY is yarn.lock always missing

ClearlyClaire and others added 8 commits November 17, 2022 11:14
…on#18760)

* Add tests

* Fix crash when a remote Flag activity mentions a private post
…stodon#20388)

The Blurhash library used by Mastodon requires an input encoded as 24
bits raw RGB data. The conversion to raw RGB using Imagemagick did not
previously specify the desired bit depth. In some situations, this leads
Imagemagick to output in a pixel format using less bpp than expected.
This then manifested as segfaults of the Sidekiq process due to
out-of-bounds read, or potentially a (highly noisy) memory infoleak.

Fixes mastodon#19235.
…todon#20640)

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

Signed-off-by: Claire <claire.github-309c@sitedethib.com>
mastodon#20641)

Signed-off-by: Claire <claire.github-309c@sitedethib.com>

Signed-off-by: Claire <claire.github-309c@sitedethib.com>
…b UI

Port 625e086 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>
…n#20677)

* Fix front-end emoji tests

* Fix nodes order being sometimes mangled when rewriting emoji
Port ccbca50 to glitch-soc

Signed-off-by: Claire <claire.github-309c@sitedethib.com>
@ionathanch
Copy link
Collaborator Author

Deployed on a new server, looks like the fix works: https://types.ionathan.ch/@systemu/109399991270401485

@ionathanch ionathanch merged commit c73e908 into types.pl Nov 26, 2022
@ionathanch ionathanch deleted the types.pl-3.5.5 branch November 26, 2022 18:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants