Snikket server release (2026-06-11 update 1)

This release is a rebuild of the June 2026 release. It contains no new features, but updates our dependencies to resolve a recent security issue.

This release has the version number stable.20260611.1.

The security issue is caused by the compromise of a trusted certificate authority which was discovered to have been using weak private keys. These keys have been trivially cracked, and are now public information.

Snikket ships with a bundle of trusted certificates, which is maintained by Mozilla. The affected CA certificates have been removed by Mozilla in this update.

We strongly recommend all servers update to this new build to ensure the security of your connections. Ensure all your clients and their operating systems are also up to date.

This was an unscheduled security-only release - there will be an upcoming feature release soon, containing improvements in the Snikket server itself.

Upgrading

To upgrade your instance, follow the instructions in the upgrade guide.

If you are currently on a beta release but want to switch to stable ones, simply put :stable instead of :beta, or download the new docker-compose.yml here, e.g. by running:

curl -o docker-compose.yml https://snikket.org/service/resources/docker-compose.yml

If you have any problems or questions, don’t hesitate to ask in our community chat!

Changes

  • Refreshed base images only