Conversation

⚠️IMPORTANT SECURITY UPDATE, PLEASE BOOST THIS POST⚠️

Please update your Sharkey to version 2024.3.2, there has been some security fixes to ensure validation of remote users and activities

this is a minor release mostly just for the security fixes

changes of this release:
- prohibited words are now correctly checked when creating notes
- notes with CW are no longer shown on the welcome page for non-logged-in users
- database migrations should no longer timeout
- docker image improvements
- important security fixes

Important Note for Users that do NOT use S3 and that USE Docker

There have been some improvements made to the Docker images that should fix some issues with that the container now runs as a seperate Sharkey user with id 991:991 so its required to change ownership of the files directory to do that run the following in the directory where your docker-compose.yml file is# replace web with what ever you named the sharkey service if you changed the default docker compose file docker compose exec --user=root web chown -R sharkey:sharkey /sharkey/files
Important Note for everyone
please update immediately there is a scheduled downtime on April 6th during that time the Sharkey docker images and repo might be unavailable for more than 2 hours