latest-dev

📦 isync — v1.6.0-dev.21+4be878b

Release type: prerelease • Commit: 4be878b

Security: ✅ Passed — 4 vulnerabilities (4 medium, 0 low)

Image Availability

isync

Registry	Reference	Tags
GitHub Container Registry	ghcr.io/homelabhd/isync	dev-4be878b · latest-dev
Docker Hub	docker.io/hlhd/isync	dev-4be878b · latest-dev
cr.optcp.com	cr.optcp.com/hlhd/isync	dev-4be878b · latest-dev

Digest pull commands & supply chain artifacts

docker.io/hlhd/isync

docker pull docker.io/hlhd/isync@sha256:3ae4596769f4684ccdca011c97e74a4bce4cd1823b0b0e596e23ebdb40fc101e

cr.optcp.com/hlhd/isync

docker pull cr.optcp.com/hlhd/isync@sha256:3ae4596769f4684ccdca011c97e74a4bce4cd1823b0b0e596e23ebdb40fc101e

ghcr.io/homelabhd/isync

docker pull ghcr.io/homelabhd/isync@sha256:3ae4596769f4684ccdca011c97e74a4bce4cd1823b0b0e596e23ebdb40fc101e

Notable Changes

Features

• image: Pin isync to one Alpine package version (SoFMeRight)

Documentation

• refresh generated badges (stagefreight) ×11
• readme: follow the README stamp (SoFMeRight)

Maintenance

• deps: update managed dependencies (stagefreight) ×4
• governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight) ×4

Security

✅ Passed — 4 vulnerabilities (4 medium, 0 low)

Vulnerability details (4 medium)

Severity	CVE	Package	Installed	Fixed	Description
Medium	CVE-2026-4738	zlib	1.3.2-r1	1.4-r0	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in OSGeo gdal (frmts/zlib/contrib/infback9 modules)...
Medium	CVE-2025-60876	busybox	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium	CVE-2025-60876	busybox-binsh	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium	CVE-2025-60876	ssl_client	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...

---

Full changelog

• [4be878b] update managed dependencies (stagefreight)
• [de29ebd] refresh generated badges (stagefreight)
• [ba3bdf4] refresh generated badges (stagefreight)
• [9cd4012] update managed dependencies (stagefreight)
• [2e411bc] refresh generated badges (stagefreight)
• [30aba04] refresh generated badges (stagefreight)
• [5820b77] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [b70a72b] refresh generated badges (stagefreight)
• [4e75381] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [c1580f0] refresh generated badges (stagefreight)
• [52e73bf] update managed dependencies (stagefreight)
• [c3c7fb7] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [c87eae7] refresh generated badges (stagefreight)
• [9e0363d] Pin isync to one Alpine package version (SoFMeRight)
• [b3686e1] refresh generated badges (stagefreight)
• [4086266] update managed dependencies (stagefreight)
• [8389a55] governance reconcile from git.optcp.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [66f062d] refresh generated badges (stagefreight)
• [e10691a] refresh generated badges (stagefreight)
• [2400032] follow the README stamp (SoFMeRight)
• [174832b] refresh generated badges (stagefreight)