1.5 KiB
REPORT — 2026-11-02 night: five small fixes and the Traefik pin, commit only (no release)
Plain words. Nothing was released. The next controller release carries: Traefik v3.7.17, which closes a real hole on every box; a restored app is watched again; a failed put-back at start-up tells the operator; three false or noisy start-up lines go.
| Commit | CI (job id) | What |
|---|---|---|
c4b6844 |
2551 green | Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); R-1347, R-1348, R-1339, R-1351, R-1323 |
3764445 |
2560 green | R-1348: the mail names a restore, not an off-site run (seen on the live proof) |
Red-proofs. Each TestR13xx_* was seen failing before its code existed, and each rule again by a mutant (10 of 10 red: felhom.eu documentation/audits/security-2026-11-02/part3/).
Live, scratch 9202, a local test image of c4b6844 (felhom.eu audits/security-2026-11-02/part3/README.md): R-1347 and R-1348 proven through staged real states; R-1339 nine false lines → none; Traefik v3.7.17 ran through three boots. R-1351: no Conflict on six boots of either image, so the live boots do not tell them apart; the proof is the test. R-1323: not seen live.
R-1339, the row's own fix was wrong. „A sub-folder of a mounted drive is not skipped" would write a userdata/ inside the app's folder and recreate the file manager. The behaviour stays; only the false line goes.
Next: on the operator's word, the release: controller v0.350.0, MinAgent unchanged (0.158.1).