Post #2232273
2024-03-13 00:45 UTC
@gunchleoc@mastodon.scot 1-3 months behind on patching gets silenced?
Like I know this is FireFish, but I assume it’ll affect mastodon too, where 4.2.7, which is the last major security patch, was Feb 16 which is almost 1 month ago.
If you’re setting it to one month you’re getting pretty close to “current version” as 4.2.8 only does important things if you’re a new instance.
Just my opinion, but rooted in something sensible I think, that you set that more to three months than one month.
Replies (1)
-
@gunchleoc@mastodon.scot 2024-03-13 07:42
@shanie@mastodon.tails.ch It's a manual configuration, so I'll never go automatically by date. For software that gets updates less often, I am definitely giving more time. I should actually silence anything that doesn't have the latest security patch yet, but I'm giving people more time to be fair. Most of us are volunteers after all. I also found out that Yunhost is behind on some stuff, so I pushed the dates further back for those. Here's the current configuration I'm using: https://codeberg.org/GunChleoc/mastodon-scripts/src/branch/main/old_versions/config.sample.toml