From 2d85dd32d08d40193dde09d60ddd0d5c83349b1b Mon Sep 17 00:00:00 2001 From: "sentry-junior[bot]" <264270552+sentry-junior[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 14:05:49 +0000 Subject: [PATCH 1/2] build(deps): Bump seaweedfs to 4.51 Co-Authored-By: Geoff Goldsmith --- docker-compose.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker-compose.yml b/docker-compose.yml index 1664dfaa817..6ff5f14d592 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -273,7 +273,7 @@ services: retries: 30 seaweedfs: <<: *restart_policy - image: "chrislusf/seaweedfs:4.40_large_disk@sha256:d07aa1dae03c687e0737b86130ded1b18474211a09e85d737fbe5508b8805139" + image: "chrislusf/seaweedfs:4.51_large_disk@sha256:f44a1d38dd2da974a16ccb26f9f9447152fd1c101ca03032e88819c6318d7bf6" entrypoint: "weed" command: >- mini From 75bc2821511064d7601127408df7ba23a0d25a95 Mon Sep 17 00:00:00 2001 From: "sentry-junior[bot]" <264270552+sentry-junior[bot]@users.noreply.github.com> Date: Tue, 27 Oct 2026 18:19:58 +0000 Subject: [PATCH 2/2] fix(seaweedfs): Disable anonymous telemetry SeaweedFS reports anonymous cluster statistics by default since 4.41. Pass -master.telemetry=false to the main service and to the temporary master started during the KEK migration. Refs VULN-3216 Co-Authored-By: Geoff Goldsmith --- docker-compose.yml | 1 + install/migrate-seaweedfs-kek.sh | 1 + 2 files changed, 2 insertions(+) diff --git a/docker-compose.yml b/docker-compose.yml index 6ff5f14d592..37c220735d4 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -279,6 +279,7 @@ services: mini -dir=/data -filer.defaultReplicaPlacement=000 + -master.telemetry=false -metricsPort=9091 -volume.dir.idx=/data/idx -volume.index=leveldbLarge diff --git a/install/migrate-seaweedfs-kek.sh b/install/migrate-seaweedfs-kek.sh index a25595bbdc2..c710e7e0448 100644 --- a/install/migrate-seaweedfs-kek.sh +++ b/install/migrate-seaweedfs-kek.sh @@ -23,6 +23,7 @@ elif [[ "$migration_state" == "needed" ]]; then -dir=/data \ -master=true \ -master.port=9333 \ + -master.telemetry=false \ -volume=false \ -filer=true \ -filer.port=8888 \