17 lines
1.5 KiB
Markdown
17 lines
1.5 KiB
Markdown
# REPORT — 2026-11-02 night: five small fixes and the Traefik pin, commit only (no release)
|
|
|
|
**Plain words.** Nothing was released. The next controller release carries: Traefik v3.7.17, which closes a real hole on every box; a restored app is watched again; a failed put-back at start-up tells the operator; three false or noisy start-up lines go.
|
|
|
|
| Commit | CI (job id) | What |
|
|
|---|---|---|
|
|
| `c4b6844` | 2551 green | Traefik v3.7.17 (GHSA-xv5x-242w-7hf7); R-1347, R-1348, R-1339, R-1351, R-1323 |
|
|
| `3764445` | 2560 green | R-1348: the mail names a restore, not an off-site run (seen on the live proof) |
|
|
|
|
**Red-proofs.** Each `TestR13xx_*` was seen failing before its code existed, and each rule again by a mutant (10 of 10 red: `felhom.eu documentation/audits/security-2026-11-02/part3/`).
|
|
|
|
**Live, scratch 9202, a local test image of `c4b6844`** (`felhom.eu audits/security-2026-11-02/part3/README.md`): R-1347 and R-1348 proven through staged real states; R-1339 nine false lines → none; Traefik v3.7.17 ran through three boots. **R-1351: no Conflict on six boots of either image, so the live boots do not tell them apart; the proof is the test.** R-1323: not seen live.
|
|
|
|
**R-1339, the row's own fix was wrong.** „A sub-folder of a mounted drive is not skipped" would write a `userdata/` inside the app's folder and recreate the file manager. The behaviour stays; only the false line goes.
|
|
|
|
**Next:** on the operator's word, the release: controller v0.350.0, MinAgent unchanged (0.158.1).
|