v2.8.5

📦 nut — v2.8.5

Release type: latest • Commit: 07d3cc3

Security: ⚠️ Warning — 1 high vulnerabilities detected

Image Availability

nut

Registry	Reference	Tags
GitHub Container Registry	ghcr.io/homelabhd/nut	v2.8.5 · latest
Docker Hub	docker.io/hlhd/nut	v2.8.5 · latest
cr.pcfae.com	cr.pcfae.com/hlhd/nut	v2.8.5 · latest

Digest pull commands & supply chain artifacts

docker.io/hlhd/nut

docker pull docker.io/hlhd/nut@sha256:d69ae15ac6008a32e81fe34e5c991feee860cae389c22fea81f493fa1138c88b

cr.pcfae.com/hlhd/nut

docker pull cr.pcfae.com/hlhd/nut@sha256:d69ae15ac6008a32e81fe34e5c991feee860cae389c22fea81f493fa1138c88b

ghcr.io/homelabhd/nut

docker pull ghcr.io/homelabhd/nut@sha256:d69ae15ac6008a32e81fe34e5c991feee860cae389c22fea81f493fa1138c88b

Highlights

• docker: rootless image built from this tree
• snmp-ups: add .0 instance to xupsLoadShedSecsWithRestart OID

Notable Changes

Features

• docker: rootless image built from this tree (SoFMeRight)

Bug Fixes

• snmp-ups: add .0 instance to xupsLoadShedSecsWithRestart OID (SoFMeRight)

Documentation

• readme: image reference is hlhd/nut (SoFMeRight)
• refresh generated badges (stagefreight)
• readme: fork README with scribe markers (SoFMeRight)

Maintenance

• governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight) ×2

Other Changes

• docs/maintainer-guide.txt: add "make -j 8 distcheck-completeness" into the mix (Jim Klimov)
• NEWS.adoc: fix indentation [networkupstools#3395] (Jim Klimov)
• docs/nut.dict: add APC models from recent NEWS.adoc bumps [networkupstools#3227, networkupstools#3395] (Jim Klimov)
• docs/maintainer-guide.txt: clarify last check of driver version bumps (Jim Klimov)
• docs/Makefile.am: spellcheck: fix tracking of FAILED state for SPELLCHECK_NOEXT_DOCS_FIRST [networkupstools#2871] (Jim Klimov)

Security

⚠️ Warning — 1 high vulnerabilities detected

Vulnerability details (1 high, 3 medium)

Severity	CVE	Package	Installed	Fixed	Description
High	CVE-2026-89147	net-snmp-libs	5.9.5.2-r0	—	Net-SNMP through 5.9.5.2 contains a denial of service vulnerability in the SMUX module where smux_accept() performs an unauthenticated blocking read without timeout on newly accepted connections...
Medium	CVE-2025-60876	busybox	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium	CVE-2025-60876	busybox-binsh	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...
Medium	CVE-2025-60876	ssl_client	1.37.0-r31	—	BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/query), allowing the request line to be split and attacker-controlled headers...

---

Full changelog

• [07d3cc3] image reference is hlhd/nut (SoFMeRight)
• [36d3551] refresh generated badges (stagefreight)
• [1057365] fork README with scribe markers (SoFMeRight)
• [d7cc333] governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [fbabcc7] governance reconcile from gitlab.prplanit.com/PrPlanIT/MaintenancePolicy (StageFreight)
• [d0a08dc] rootless image built from this tree (SoFMeRight)
• [7591cb2] add .0 instance to xupsLoadShedSecsWithRestart OID (SoFMeRight)
• [0e051f9] docs/maintainer-guide.txt: add "make -j 8 distcheck-completeness" into the mix (Jim Klimov)
• [26776a7] NEWS.adoc: fix indentation [networkupstools#3395] (Jim Klimov)
• [f69066b] docs/nut.dict: add APC models from recent NEWS.adoc bumps [networkupstools#3227, networkupstools#3395] (Jim Klimov)
• [a50ea6c] docs/maintainer-guide.txt: clarify last check of driver version bumps (Jim Klimov)
• [5746386] docs/Makefile.am: spellcheck: fix tracking of FAILED state for SPELLCHECK_NOEXT_DOCS_FIRST [networkupstools#2871] (Jim Klimov)