Skip to content

dev-9cd4012

Pre-release
Pre-release

Choose a tag to compare

@SoFMeRight SoFMeRight released this 09 Nov 23:45
· 4 commits to main since this release

πŸ“¦ isync β€” v1.6.0-dev.18+9cd4012

Release type: prerelease β€’ Commit: 9cd4012

Security: βœ… Passed β€” 4 vulnerabilities (4 medium, 0 low)

Image Availability

isync

Registry Reference Tags
GitHub Container Registry ghcr.io/homelabhd/isync dev-9cd4012 Β· latest-dev
Docker Hub docker.io/hlhd/isync dev-9cd4012 Β· latest-dev
cr.optcp.com cr.optcp.com/hlhd/isync dev-9cd4012 Β· latest-dev
Digest pull commands & supply chain artifacts

docker.io/hlhd/isync

docker pull docker.io/hlhd/isync@sha256:3f662ce793447a8ea4afe2dd5dacf5ee8b7c9994007fdfc5ba10c5a0e3d6c670

cr.optcp.com/hlhd/isync

docker pull cr.optcp.com/hlhd/isync@sha256:3f662ce793447a8ea4afe2dd5dacf5ee8b7c9994007fdfc5ba10c5a0e3d6c670

ghcr.io/homelabhd/isync

docker pull ghcr.io/homelabhd/isync@sha256:3f662ce793447a8ea4afe2dd5dacf5ee8b7c9994007fdfc5ba10c5a0e3d6c670

Notable Changes

Features

  • image: Pin isync to one Alpine package version (SoFMeRight)

Documentation

  • refresh generated badges (stagefreight) Γ—9
  • readme: follow the README stamp (SoFMeRight)

Maintenance

  • deps: update managed dependencies (stagefreight) Γ—3
  • governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight) Γ—4

Security

βœ… Passed β€” 4 vulnerabilities (4 medium, 0 low)

Vulnerability details (4 medium)
Severity CVE Package Installed Fixed Description
Medium CVE-2026-4738 zlib 1.3.2-r1 1.4-r0 Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules)...
Medium CVE-2025-60876 busybox 1.37.0-r31 β€” BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium CVE-2025-60876 busybox-binsh 1.37.0-r31 β€” BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium CVE-2025-60876 ssl_client 1.37.0-r31 β€” BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
---
Full changelog
  • [9cd4012] update managed dependencies (stagefreight)
  • [2e411bc] refresh generated badges (stagefreight)
  • [30aba04] refresh generated badges (stagefreight)
  • [5820b77] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
  • [b70a72b] refresh generated badges (stagefreight)
  • [4e75381] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
  • [c1580f0] refresh generated badges (stagefreight)
  • [52e73bf] update managed dependencies (stagefreight)
  • [c3c7fb7] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
  • [c87eae7] refresh generated badges (stagefreight)
  • [9e0363d] Pin isync to one Alpine package version (SoFMeRight)
  • [b3686e1] refresh generated badges (stagefreight)
  • [4086266] update managed dependencies (stagefreight)
  • [8389a55] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
  • [66f062d] refresh generated badges (stagefreight)
  • [e10691a] refresh generated badges (stagefreight)
  • [2400032] follow the README stamp (SoFMeRight)
  • [174832b] refresh generated badges (stagefreight)