Skip to content
Snippets Groups Projects

Add 1.2.10 release blog post

Merged Ciarán Ainsworth requested to merge funkwhale-1210-release into main
1 file
+ 18
0
Compare changes
  • Side-by-side
  • Inline
+ 18
0
Title: Funkwhale 1.2.10 release
Date: 2023-03-17
Authors: Sporiff
Category: Release
Slug: funkwhale-1210-release
Summary: Funkwhale 1.2.10 is a security patch release
Hi everyone 🐳
We know you're all waiting patiently for 1.3.0. We're still working on some issues raised with the RC (which you can check out [in the milestone board](https://dev.funkwhale.audio/groups/funkwhale/-/milestones/5#tab-issues)), but in the meantime we have another small patch release for you.
Funkwhale 1.2.10 fixes a security bug which enables anonymous access to media files regardless of account access. The issue is caused by misconfigured Nginx templates, so please make sure to update your Nginx files to the latest version or update any custom templates to include the changes found in [this commit](https://dev.funkwhale.audio/funkwhale/funkwhale/-/commit/b00ef2e32efcd507d85a0fc0e29f253e16aecee8). This issue affects **all** deployment methods.
Huge thank you to Conradowatz for reporting the issue on our forum, to [JuniorJPDJ](https://dev.funkwhale.audio/JuniorJPDJ) for putting in a fix, and to [georgkrause](https://dev.funkwhale.audio/georgkrause) for coordinating the release 🙏
As always, you can [follow the upgrade instructions in our docs](https://docs.funkwhale.audio/admin/upgrading.html) to get yourself up-to-date.
That's all for now! Happy upgrade 🐋
Loading