Bumps the app image within the Mumble 1.6.x series (RC → RC 2). This supersedes the older upgrade-45dc01d bump to v1.6.870-5; the branch/PR is reused and re-tested with this tree.
Server-side fixes only: unauthenticated-connection hardening (drop slow/unauth connections, reject
reserved-name use), crash/DoS fixes (malformed packets, group add/remove races, ICE registerUser),
ACL/temporary-group/suppression-state correctness, TLS 1.3 sslCiphers, config RegEx parity with 1.5,
IPv6 QoS + IP netmask fixes, and a null-value channel-property migration fix.
Operator action required
None. No schema/config migrations; existing mumble-server.sqlite data and the MUMBLE_CONFIG_*
environment contract are unchanged. .env.sample's config-doc link was updated to the release's git
tag (v1.6.0-alpha2, since 1.6.1001's git tag uses the pre-release naming).
Advisory scan (deterministic): 0 CVEs fixed by this upgrade identified (7 sources checked); the
changelog names crash/DoS hardening but no CVE ids.
Release (operator, after merge)
This PR does not bump the coop-cloud.*.version label. Publish with:
abra recipe release mumble -z
CI verification is run against this one-commit PR head. NOT merged — for operator review.
## Upgrade mumble-server to v1.6.1001-0
Bumps the app image within the Mumble 1.6.x series (RC → RC 2). This supersedes the older
`upgrade-45dc01d` bump to `v1.6.870-5`; the branch/PR is reused and re-tested with this tree.
| service | image | current | new |
|---------|-------|---------|-----|
| app | mumblevoip/mumble-server | v1.6.870-0 | v1.6.1001-0 |
| web | rankenstein/mumble-web | 0.5 | 0.5 (unchanged, already current) |
**Upstream release notes:** mumble-server v1.6.870-0 → v1.6.1001-0: https://github.com/mumble-voip/mumble/releases/tag/v1.6.0-alpha2
**Full changelog / announcement:** https://www.mumble.info/blog/mumble-1.6.1001-rc-2/
### What changed upstream
Server-side fixes only: unauthenticated-connection hardening (drop slow/unauth connections, reject
reserved-name use), crash/DoS fixes (malformed packets, group add/remove races, ICE `registerUser`),
ACL/temporary-group/suppression-state correctness, TLS 1.3 `sslCiphers`, config RegEx parity with 1.5,
IPv6 QoS + IP netmask fixes, and a `null`-value channel-property migration fix.
### Operator action required
None. No schema/config migrations; existing `mumble-server.sqlite` data and the `MUMBLE_CONFIG_*`
environment contract are unchanged. `.env.sample`'s config-doc link was updated to the release's git
tag (`v1.6.0-alpha2`, since 1.6.1001's git tag uses the pre-release naming).
Advisory scan (deterministic): **0 CVEs fixed by this upgrade identified** (7 sources checked); the
changelog names crash/DoS hardening but no CVE ids.
### Release (operator, after merge)
This PR does **not** bump the `coop-cloud.*.version` label. Publish with:
`abra recipe release mumble -z`
CI verification is run against this one-commit PR head. **NOT merged** — for operator review.
cc @trav @notplants
CI verification is run against this one-commit PR head. NOT merged — for operator review.
cc @trav @notplants
autonomic-bot
requested review from trav 2026-11-06 04:57:50 +00:00
autonomic-bot
requested review from notplants 2026-11-06 04:57:50 +00:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Upgrade mumble-server to v1.6.1001-0
Bumps the app image within the Mumble 1.6.x series (RC → RC 2). This supersedes the older
upgrade-45dc01dbump tov1.6.870-5; the branch/PR is reused and re-tested with this tree.Upstream release notes: mumble-server v1.6.870-0 → v1.6.1001-0: https://github.com/mumble-voip/mumble/releases/tag/v1.6.0-alpha2
Full changelog / announcement: https://www.mumble.info/blog/mumble-1.6.1001-rc-2/
What changed upstream
Server-side fixes only: unauthenticated-connection hardening (drop slow/unauth connections, reject
reserved-name use), crash/DoS fixes (malformed packets, group add/remove races, ICE
registerUser),ACL/temporary-group/suppression-state correctness, TLS 1.3
sslCiphers, config RegEx parity with 1.5,IPv6 QoS + IP netmask fixes, and a
null-value channel-property migration fix.Operator action required
None. No schema/config migrations; existing
mumble-server.sqlitedata and theMUMBLE_CONFIG_*environment contract are unchanged.
.env.sample's config-doc link was updated to the release's gittag (
v1.6.0-alpha2, since 1.6.1001's git tag uses the pre-release naming).Advisory scan (deterministic): 0 CVEs fixed by this upgrade identified (7 sources checked); the
changelog names crash/DoS hardening but no CVE ids.
Release (operator, after merge)
This PR does not bump the
coop-cloud.*.versionlabel. Publish with:abra recipe release mumble -zCI verification is run against this one-commit PR head. NOT merged — for operator review.
cc @trav @notplants
CI verification is run against this one-commit PR head. NOT merged — for operator review.
cc @trav @notplants
!testme
🌻 cc-ci —
mumble@45dc01dd✅ passedfull logs · dashboard
chore: upgrade mumble-server to v1.6.870-5to chore: upgrade mumble-server to v1.6.1001-045dc01dd6ctobf53c587ae!testme
🌻 cc-ci —
mumble@bf53c587✅ passedfull logs · dashboard
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.