Posts by sharkey@sharkey.team
(DIR) Post #B41Xe0itBLHl4kZ3h2 by sharkey@sharkey.team
0 likes, 11 repeats
This is your official notice that we'll be making a major security release for Sharkey tomorrow (between 2026-03-08T22:00:00.000Z and 2026-03-09T00:00:00.000Z) in coordination with Misskey. Please be ready to patch your instances soon as humanly possible, as the vulnerabilities at play are extremely severe. Note that IceShrimp and Firefish derivatives are not affected, only direct forks of Misskey.
(DIR) Post #B41XsSzAtmhSmj4iTQ by sharkey@sharkey.team
0 likes, 1 repeats
For instances of sufficiently large instance (>~50 MaU) who are unable to apply patches at that time, our maintainer (@julia@eepy.moe) would like to give a one time offer to apply patches on the behalf of instance administrators.If you are physically unable to apply patches and meet the requirements, please direct message her for further information.
(DIR) Post #B41cZNFmUCevH9YeNk by sharkey@sharkey.team
0 likes, 0 repeats
@woof@fedi.aria.dog these vulnerabilities would not enable impersonation 🥴
(DIR) Post #B43sglwJ5e49Rnv0aW by sharkey@sharkey.team
0 likes, 1 repeats
The stable release for 2025.4.6 has been made, with the security patches applied. Develop has merge conflicts that are actively being resolved.RE: https://sharkey.team/notes/ajka8rybkjf80061
(DIR) Post #B43tETfDXqEmc1zs7E by sharkey@sharkey.team
0 likes, 1 repeats
Jumped the gun on posting this slightly, my bad!! 🙇♀️Docker images have now been pushed. Develop is still in progress.
(DIR) Post #B43tw66gUSsUIFdzKy by sharkey@sharkey.team
0 likes, 0 repeats
@natty@astolfo.social dm @julia@eepy.moe with your findings
(DIR) Post #B43xjsqWMpIpVXW0Gm by sharkey@sharkey.team
0 likes, 1 repeats
I'm sorry, but- I'm gonna have to throw in the towel for develop for the night. For the savvy users running it, please look into forward-porting the patches for your own instance, until an official release is made.I'm at the end of my rope for now, and need to recharge- the diff requires resolving six months of merge conflicts. You have my sincerest apologies.- @julia@eepy.moe
(DIR) Post #B44ILQmf9GDwYstM5A by sharkey@sharkey.team
1 likes, 1 repeats
Important Clarification: Sharkey's develop branch is affected by some of today's vulnerabilities, so instances running on development (pre-release) versions do need to update or apply mitigations!We still haven't completed patches for the develop branch, but a candidate patch set is being tested as we speak. We'll push the changes as soon as they're done and confirmed to work!#Sharkey #SharkeyDev
(DIR) Post #B46b8HTui5KpOKU8aO by sharkey@sharkey.team
0 likes, 2 repeats
Sharkey's develop branch is now updated with all security patches. Please update if you haven't already!#Sharkey #SharkeyDevRE: https://sharkey.team/notes/ajm6b6j2kjf8009t
(DIR) Post #B6N2lIDtmjeTsVD87c by sharkey@sharkey.team
1 likes, 8 repeats
This is your official notice that we'll be making a major security release for Sharkey on the 20th of May, 2026, between 2026-05-20T13:00:00.000Z and 2026-05-20T15:00:00.000Z. Prepare to update immediately upon release. If you are unable to update your instance at the given time, take it offline before the release.
(DIR) Post #B6ULxPyU399Id4DOyW by sharkey@sharkey.team
0 likes, 1 repeats
Starting soon!RE: https://sharkey.team/notes/amckzae8d8ka0001
(DIR) Post #B6UQuzqiiA00nLFTSC by sharkey@sharkey.team
1 likes, 4 repeats
We've released 2025.4.7, containing the security fixes mentioned. Work on merging the security fixes into develop is underway.RE: https://sharkey.team/notes/amckzae8d8ka0001
(DIR) Post #B6UX5ut46HMUJbw4ga by sharkey@sharkey.team
0 likes, 3 repeats
develop has been updated! happy patching, everyone