⚠️IMPORTANT SECURITY UPDATE, PLEASE BOOST THIS POST⚠️
Please update your Sharkey to version 2024.3.2, there has been some security fixes to ensure validation of remote users and activities
this is a minor release mostly just for the security fixes
changes of this release:
prohibited words are now correctly checked when creating notes
notes with CW are no longer shown on the welcome page for non-logged-in users
database migrations should no longer timeout
docker image improvements
important security fixes
Important Note for Users that do NOT use S3 and that USE Docker
There have been some improvements made to the Docker images that should fix some issues with that the container now runs as a seperate Sharkey user with id 991:991 so its required to change ownership of the files directory to do that run the following in the directory where your docker-compose.yml file is
# replace web with what ever you named the sharkey service if you changed the default docker compose file
docker compose exec --user=root web chown -R sharkey:sharkey /sharkey/files
Important Note for everyone
please update immediately there is a scheduled downtime on April 6th during that time the Sharkey docker images and repo might be unavailable for more than 2 hours
Add comment