admin/felhom.eu
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Close-out security night 2026-11-02/03: R-1303, R-1310, R-1324, R-1334, R-1336 closed; R-1354-R-1365 filed; 8 claims walked (31 -> 23), capability map + stands; STATUS (release list, D66), CONTEXT, report. Docs only.
gates / gates (push) Successful in 1m54s
Details

Browse Source
This commit is contained in:
admin committed 2026-11-03 04:58:42 +01:00
1 parent 329d769d89
commit e95d083f47
10 files changed
+504 -103
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

documentation/audits/security-2026-11-02/part1/night-2026-11-03.log
+295
View File
@@ -0,0 +1,295 @@
2026-11-03T03:40:21.3774082Z felhom-gates-runner-2(version:v0.6.1) received task 2593 of job watch, be triggered by event: schedule
2026-11-03T03:40:21.3794120Z workflow prepared
2026-11-03T03:40:21.3795891Z evaluating expression 'always()'
2026-11-03T03:40:21.3797225Z expression 'always()' evaluated to 'true'
2026-11-03T03:40:21.3807020Z evaluating expression ''
2026-11-03T03:40:21.3808038Z expression '' evaluated to 'true'
2026-11-03T03:40:21.3808331Z ⭐ Run Main Fetch main (latest, for the memory) and the two sibling repos
2026-11-03T03:40:21.3814363Z Wrote command \n\necho "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"\nbase=http://gitea.gitea-system.svc.cluster.local:3000/admin\ngit init -q . && git remote add origin $base/felhom.eu.git\ngit fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD\necho "felhom.eu main at $(git rev-parse --short=12 HEAD)"\nfor r in felhom-controller app-catalog-felhom.eu; do\n git init -q ../$r && git -C ../$r remote add origin $base/$r.git\n git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD\n echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"\ndone\n\n\n to 'workflow/0.sh'
2026-11-03T03:40:21.3816737Z ::group::Run echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
2026-11-03T03:40:21.3817177Z echo "WATCH_STARTED_AT=$(date +%s)" >> "$GITHUB_ENV"
2026-11-03T03:40:21.3817592Z base=http://gitea.gitea-system.svc.cluster.local:3000/admin
2026-11-03T03:40:21.3817833Z git init -q . && git remote add origin $base/felhom.eu.git
2026-11-03T03:40:21.3818070Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
2026-11-03T03:40:21.3818305Z echo "felhom.eu main at $(git rev-parse --short=12 HEAD)"
2026-11-03T03:40:21.3818537Z for r in felhom-controller app-catalog-felhom.eu; do
2026-11-03T03:40:21.3818819Z git init -q ../$r && git -C ../$r remote add origin $base/$r.git
2026-11-03T03:40:21.3819259Z git -C ../$r fetch -q --depth 1 origin main && git -C ../$r checkout -q FETCH_HEAD
2026-11-03T03:40:21.3819497Z echo "$r at $(git -C ../$r rev-parse --short=12 HEAD)"
2026-11-03T03:40:21.3819716Z done
2026-11-03T03:40:21.3819996Z shell: bash --noprofile --norc -e -o pipefail {0}
2026-11-03T03:40:21.3820238Z ::endgroup::
2026-11-03T03:40:34.2379112Z felhom.eu main at 17820abbe363
2026-11-03T03:40:37.5306666Z felhom-controller at 13e34d4ed4c3
2026-11-03T03:40:38.3913639Z app-catalog-felhom.eu at c760fca93898
2026-11-03T03:40:38.3999626Z ::group::Run set -u
2026-11-03T03:40:38.4000281Z set -u
2026-11-03T03:40:38.4000518Z mkdir -p documentation/security-watch
2026-11-03T03:40:38.4000738Z mode="${MODE:-run}"
2026-11-03T03:40:38.4001041Z [ "${GITHUB_EVENT_NAME:-}" = "schedule" ] && mode=run
2026-11-03T03:40:38.4001299Z echo "mode: $mode"
2026-11-03T03:40:38.4001482Z case "$mode" in
2026-11-03T03:40:38.4001676Z test-mail) python3 scripts/security_watch.py --test-mail; exit $? ;;
2026-11-03T03:40:38.4002145Z dry) extra="--no-mail" ; state=/tmp/state-dry.json
2026-11-03T03:40:38.4002374Z cp documentation/security-watch/state.json "$state" 2>/dev/null || true ;;
2026-11-03T03:40:38.4002591Z seed) extra="--seed" ; state=documentation/security-watch/state.json ;;
2026-11-03T03:40:38.4002905Z run) extra="" ; state=documentation/security-watch/state.json ;;
2026-11-03T03:40:38.4003179Z *) echo "unknown mode $mode"; exit 2 ;;
2026-11-03T03:40:38.4003380Z esac
2026-11-03T03:40:38.4003553Z python3 scripts/security_watch.py --state="$state" --catalog=../app-catalog-felhom.eu \
2026-11-03T03:40:38.4003924Z --controller=../felhom-controller --json=/tmp/watch-results.json $extra
2026-11-03T03:40:38.4004172Z shell: bash --noprofile --norc -e -o pipefail {0}
2026-11-03T03:40:38.4004423Z env:
2026-11-03T03:40:38.4015597Z RESEND_API_KEY: ***
2026-11-03T03:40:38.4015882Z GH_ADVISORY_TOKEN: ***
2026-11-03T03:40:38.4016085Z MODE:
2026-11-03T03:40:38.4016291Z FELHOM_WHEEL_FETCH: 1
2026-11-03T03:40:38.4016553Z ::endgroup::
2026-11-03T03:40:38.4083949Z mode: run
2026-11-03T03:40:38.6736065Z /root/.cache/act/76abc955bc1c1a2a/hostexecutor/scripts/security_watch.py:1024: DeprecationWarning: datetime.datetime.utcnow() is deprecated and scheduled for removal in a future version. Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.now(datetime.UTC).
2026-11-03T03:40:38.6737029Z today = datetime.date.fromisoformat(opts["today"]) if "today" in opts else datetime.datetime.utcnow().date()
2026-11-03T03:40:38.7287299Z security watch 2026-11-03: 197 pins (11 box/build, 97 app, 89 DooPlex); GitHub key PRESENT — every repo's advisories tonight
2026-11-03T03:40:50.3040389Z RUNTIME-READ traefik:v3.7.17 7 s ok
2026-11-03T03:41:41.6296265Z RUNTIME-READ actualbudget/actual-server:26.11.0 18 s ok
2026-11-03T03:41:45.9805770Z RUNTIME-READ lscr.io/linuxserver/bookstack:26.09.2 16 s ok
2026-11-03T03:42:06.6399759Z RUNTIME-READ gitea/gitea:28.3.0 7 s ok
2026-11-03T03:42:31.5646844Z RUNTIME-READ grafana/grafana:13.2.5 30 s ok
2026-11-03T03:43:20.0272268Z RUNTIME-READ n8nio/n8n:2.46.4 47 s ok
2026-11-03T03:43:25.9441227Z RUNTIME-READ vaultwarden/server:1.37.5-alpine 9 s ok
2026-11-03T03:44:30.3181250Z RUNTIME-READ louislam/uptime-kuma:2.5.9 77 s ok
2026-11-03T03:44:35.6053776Z RUNTIME-READ mysql:8.4 24 s ok
2026-11-03T03:44:52.4270736Z ADVISORY doop actualbudget/actual-server 26.10.0 GHSA-p7p2-pm6f-rg6x (fixed 26.11.0); CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4271671Z ADVISORY doop advplyr/audiobookshelf 2.37.1 CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4272667Z ADVISORY box cloudflare/cloudflared 2026.10.4 feed:cloudflare-blog:01M5DK5J81T0VC8YTBR2FKD8A3 (fixed read the notice); vulnnotes:cloudflared@2026.10.6:VULN-184686 (fixed 2026.10.6); vulnnotes:cloudflared@2026.10.5:VULN-183456 (fixed 2026.10.5)
2026-11-03T03:44:52.4273109Z ADVISORY doop codewithcj/sparkyfitness v1.9.0 release:CodeWithCJ/SparkyFitness@v1.10.0 (fixed v1.10.0)
2026-11-03T03:44:52.4273409Z ADVISORY doop codewithcj/sparkyfitness_server v1.9.0 release:CodeWithCJ/SparkyFitness@v1.10.0 (fixed v1.10.0); CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4273860Z ADVISORY doop crocodilestick/calibre-web-automated dev CVE-2026-111497 (fixed 1.2.1)
2026-11-03T03:44:52.4274144Z ADVISORY doop docker.io/calcom/cal.com v6.2.0 CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
2026-11-03T03:44:52.4274491Z ADVISORY doop flomp/wanderer-db v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2)
2026-11-03T03:44:52.4274905Z ADVISORY doop flomp/wanderer-web v0.21.0 GHSA-vprp-gr6m-j375 (fixed v0.21.2); GHSA-3xp7-7492-j2q6 (fixed v0.21.2); GHSA-j9m4-8qwf-jvx6 (fixed v0.21.2); GHSA-fprh-3pp9-68m9 (fixed v0.21.2); … 1 more
2026-11-03T03:44:52.4275291Z ADVISORY doop getmeili/meilisearch v1.11.3 release:meilisearch/meilisearch@v1.55.1 (fixed v1.55.1); release:meilisearch/meilisearch@v1.56.1 (fixed v1.56.1)
2026-11-03T03:44:52.4275741Z ADVISORY doop ghcr.io/gethomepage/homepage v1.13.2 GHSA-669x-4pg4-w24r (fixed 2.2.0); CVE-2026-111497 (fixed 22.23.4)
2026-11-03T03:44:52.4276028Z ADVISORY doop ghcr.io/immich-app/immich-machine-learning v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 7 more
2026-11-03T03:44:52.4276413Z ADVISORY doop ghcr.io/immich-app/immich-server v2.7.5 GHSA-q89f-h332-8q2h (fixed v3.2.4); GHSA-h5w4-vjv4-9r5q (fixed a version after 3.1.0 (the notice names none)); GHSA-g4w3-c888-cr93 (fixed v3.2.0); GHSA-72rm-x7xr-v679 (fixed v3.3.0); … 8 more
2026-11-03T03:44:52.4276863Z ADVISORY doop ghcr.io/lukegus/termix release-2.9.2 CVE-2026-111497 (fixed 26.12.1)
2026-11-03T03:44:52.4277115Z ADVISORY doop ghcr.io/paperless-ngx/paperless-ngx 3.3.4 release:paperless-ngx/paperless-ngx@v3.4.0 (fixed v3.4.0); CVE-2026-111497 (fixed 1.2.1)
2026-11-03T03:44:52.4277441Z ADVISORY doop gitea/gitea 1.26.2 GHSA-mf6p-vqpw-3r7x (fixed 28.3.0); GHSA-32h8-5xqg-h466 (fixed 28.3.0); GHSA-9v6p-xpcp-7488 (fixed 28.3.0); GHSA-6h2f-c8jm-84hc (fixed 28.3.0); … 145 more
2026-11-03T03:44:52.4277770Z ADVISORY doop grafana/grafana 13.2.4 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 2 more
2026-11-03T03:44:52.4278189Z ADVISORY box gtstef/filebrowser 1.5.8-stable GHSA-892f-9h5p-mfc8 (fixed 2.1.0-stable, 2.1.4-beta); GHSA-gfgm-886h-6r47 (fixed 2.0.2-stable, 2.1.4-beta); GHSA-wxj5-g3qp-g732 (fixed 2.0.2-stable, 2.1.3-beta); GHSA-3j46-5w28-f8p2 (fixed 2.1.0-stable, 2.1.3-beta); … 32 more
2026-11-03T03:44:52.4278635Z ADVISORY doop louislam/uptime-kuma 2.5.6 GHSA-86ch-2247-gr56 (fixed 2.5.9); GHSA-v2p3-6f5h-6hhf (fixed 2.5.8); GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand); release:louislam/uptime-kuma@2.5.7 (fixed 2.5.7); … 1 more
2026-11-03T03:44:52.4279095Z ADVISORY doop outlinewiki/outline 1.11.0 GHSA-x4w3-9p9j-cprh (fixed 1.12.0); GHSA-rq53-m97j-f2pg (fixed 1.12.0); GHSA-h6ff-rw9x-5mq2 (fixed 1.12.0); GHSA-rvj7-2gww-6xfq (fixed 1.12.0); … 3 more
2026-11-03T03:44:52.4279403Z ADVISORY doop redis 8.10.2 GHSA-c8h9-259x-jff4 (fixed the range is unreadable — check by hand); GHSA-8ghh-qpmp-7826 (fixed no fixed version named yet); GHSA-93m2-935m-8rj3 (fixed no fixed version named yet); GHSA-m8fj-85cg-7vhp (fixed the range is unreadable — check by hand); … 8 more
2026-11-03T03:44:52.4279755Z ADVISORY doop rommapp/romm 5.4.0 release:rommapp/romm@5.4.1 (fixed 5.4.1); CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4280104Z ADVISORY doop vabene1111/recipes 2.6.15 CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4280355Z ADVISORY doop vaultwarden/server 1.37.4 GHSA-x9cq-f669-vrr4 (fixed 1.37.5); GHSA-9pjj-f9g5-3x4c (fixed 1.37.5)
2026-11-03T03:44:52.4280613Z ADVISORY app calcom/cal.com v6.2.0 GHSA-p3f6-52gv-cj7m (fixed the range is unreadable — check by hand); GHSA-cpf2-q635-xrwx (fixed the range is unreadable — check by hand); CVE-2026-111497 (fixed 22.23.4, 24.22.1, 26.12.1)
2026-11-03T03:44:52.4280964Z ADVISORY app codewithcj/sparkyfitness v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none))
2026-11-03T03:44:52.4281497Z ADVISORY app codewithcj/sparkyfitness_server v0.17.3 GHSA-v883-jx9h-qf29 (fixed a version after 1.7.2 (the notice names none)); GHSA-cmmf-53wf-r5gv (fixed a version after 1.6.5 (the notice names none)); GHSA-p8cf-g8rv-gvrq (fixed a version after 1.6.5 (the notice names none)); CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4281886Z ADVISORY app crocodilestick/calibre-web-automated v4.0.8 CVE-2026-111497 (fixed 1.2.1)
2026-11-03T03:44:52.4282171Z ADVISORY app f0rc3/gokapi v1.9.6 GHSA-45vh-rpc8-hxpp (fixed 2.2.4); GHSA-qwc6-vc2v-2ggj (fixed 2.2.4); GHSA-j6jp-78w8-34x6 (fixed 2.2.4); GHSA-m2hx-wjxc-9fp4 (fixed 2.2.3); … 6 more
2026-11-03T03:44:52.4282847Z ADVISORY app getmeili/meilisearch v1.41.0 release:meilisearch/meilisearch@v1.55.1 (fixed v1.55.1); release:meilisearch/meilisearch@v1.56.1 (fixed v1.56.1)
2026-11-03T03:44:52.4283201Z ADVISORY app getmeili/meilisearch v1.36.0 release:meilisearch/meilisearch@v1.55.1 (fixed v1.55.1); release:meilisearch/meilisearch@v1.56.1 (fixed v1.56.1)
2026-11-03T03:44:52.4283653Z ADVISORY app ghcr.io/immich-app/immich-machine-learning v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
2026-11-03T03:44:52.4283988Z ADVISORY app ghcr.io/immich-app/immich-server v3.3.5 GHSA-8244-8vpr-vp9c (fixed the range is unreadable — check by hand)
2026-11-03T03:44:52.4284583Z ADVISORY app ghcr.io/karakeep-app/karakeep 0.34.1 GHSA-pp34-2c9r-mchw (fixed no fixed version named yet)
2026-11-03T03:44:52.4284909Z ADVISORY app ghcr.io/lukegus/termix 26.10.5 GHSA-r9gw-3w87-mhh7 (fixed no fixed version named yet); release:Termix-SSH/Termix@v26.10.6 (fixed v26.10.6)
2026-11-03T03:44:52.4285306Z ADVISORY app ghcr.io/mealie-recipes/mealie v3.29.0 release:mealie-recipes/mealie@v3.30.0 (fixed v3.30.0)
2026-11-03T03:44:52.4285694Z ADVISORY app ghcr.io/paperless-ngx/paperless-ngx 2.20.15 GHSA-c8f3-pqr2-rr24 (fixed 3.3.2); GHSA-2jhj-xqrq-rmrq (fixed 3.1.2); CVE-2026-111497 (fixed 1.1.1)
2026-11-03T03:44:52.4286127Z ADVISORY app ghcr.io/tandoorrecipes/recipes 2.7.2 GHSA-c7mc-c9jr-38hf (fixed the range is unreadable — check by hand); GHSA-cqj3-64qw-4w52 (fixed the range is unreadable — check by hand)
2026-11-03T03:44:52.4286588Z ADVISORY app gitea/gitea 28.3.0 GHSA-rqhx-647v-wx32 (fixed no fixed version named yet)
2026-11-03T03:44:52.4287029Z ADVISORY app glanceapp/glance v0.8.5 GHSA-r225-jhr6-68cc (fixed >= 0.8.7)
2026-11-03T03:44:52.4287375Z ADVISORY app grafana/grafana 13.2.5 GHSA-8xmm-x63g-f6xv (fixed no fixed version named yet); GHSA-4724-7jwc-3fpw (fixed the range is unreadable — check by hand); GHSA-2x6g-h2hg-rq84 (fixed the range is unreadable — check by hand); GHSA-8wjh-59cw-9xh4 (fixed no fixed version named yet); … 1 more
2026-11-03T03:44:52.4287943Z ADVISORY app louislam/uptime-kuma 2.5.9 GHSA-qjxc-h5jf-c7rj (fixed the range is unreadable — check by hand)
2026-11-03T03:44:52.4288340Z ADVISORY app n8nio/n8n 2.46.4 GHSA-2x68-96jw-5r6c (fixed >= 3.0.1); GHSA-9p7v-45m2-wxgj (fixed >= 3.0.1); GHSA-mx4r-96jx-v278 (fixed >= 3.0.1); GHSA-4v22-g448-h4rg (fixed >= 3.0.1); … 9 more
2026-11-03T03:44:52.4288882Z ADVISORY app privatebin/pdo 2.1.0 GHSA-c4gc-8mcm-hh65 (fixed 2.1.1); GHSA-hw9p-r7fq-8mvr (fixed 2.1.1)
2026-11-03T03:44:52.4289157Z ADVISORY app rommapp/romm 5.4.1 CVE-2026-111497 (fixed 24.22.1)
2026-11-03T03:44:52.4289540Z BEHIND doop ghcr.io/alam00000/bentopdf 2.8.10 newest 2.8.11
2026-11-03T03:44:52.4289838Z BEHIND doop ghcr.io/diced/zipline 4.8.1 newest 4.8.2
2026-11-03T03:44:52.4290214Z BEHIND app freikin/dawarich 1.19.0 newest 1.20.1
2026-11-03T03:44:52.4290478Z BEHIND app ghcr.io/alam00000/bentopdf v2.8.10 newest v2.8.11
2026-11-03T03:44:52.4290753Z BEHIND app ghcr.io/alexta69/metube 2026.10.27 newest 2026.11.01
2026-11-03T03:44:52.4291099Z BEHIND app ghcr.io/hargata/lubelogger v1.7.3 newest v1.7.4
2026-11-03T03:44:52.4291336Z BEHIND app ghcr.io/kozea/radicale 3.8.1 newest 3.9.0
2026-11-03T03:44:52.4291560Z BEHIND app gotson/komga 1.28.0 newest 1.29.2
2026-11-03T03:44:52.4291838Z BEHIND app kimai/kimai2 2.67.0 newest 2.71.0
2026-11-03T03:44:52.4292136Z BEHIND app lscr.io/linuxserver/code-server 4.143.1 newest 4.144.0
2026-11-03T03:44:52.4292412Z BEHIND app lukevella/rallly 4.16.3 newest 4.16.4
2026-11-03T03:44:52.4293002Z BEHIND app nextcloud 34.0.4-apache newest 34.0.5-apache
2026-11-03T03:44:52.4293302Z BEHIND app nginx 1.30.5-alpine newest 1.31.8-alpine
2026-11-03T03:44:52.4293598Z BEHIND app qbittorrentofficial/qbittorrent-nox 5.2.4-1 newest 5.3.0-2
2026-11-03T03:44:52.4293847Z GAP buil alpine 3.24.2 newest 3.24.3
2026-11-03T03:44:52.4294069Z GAP buil alpine 3.24.2 newest 3.24.3
2026-11-03T03:44:52.4294428Z GAP doop alpine/k8s 1.37.1 newest 1.37.2
2026-11-03T03:44:52.4294670Z GAP doop arcadiatechnology/crafty-4 4.11.0
2026-11-03T03:44:52.4294905Z GAP doop bhgedigital/envsubst latest
2026-11-03T03:44:52.4295298Z GAP doop busybox 1.38
2026-11-03T03:44:52.4295544Z GAP doop codercom/code-server 4.143.1 newest 4.144.0
2026-11-03T03:44:52.4295874Z GAP buil debian 13.7-slim
2026-11-03T03:44:52.4296313Z GAP buil debian 13.7-slim
2026-11-03T03:44:52.4296799Z GAP doop docker.io/bitnamilegacy/postgresql 17.6.0-debian-12-r3
2026-11-03T03:44:52.4297382Z GAP doop docker.io/library/nextcloud 34.0.5-apache
2026-11-03T03:44:52.4297795Z GAP doop docker.io/valkey/valkey 9.2-alpine
2026-11-03T03:44:52.4298298Z GAP doop filebrowser/filebrowser v2.63.23
2026-11-03T03:44:52.4298735Z GAP doop ghcr.io/cloudnative-pg/postgresql 17.2 newest 17.11
2026-11-03T03:44:52.4299240Z GAP doop ghcr.io/headlamp-k8s/headlamp v0.46.0
2026-11-03T03:44:52.4299607Z GAP doop ghcr.io/immich-app/postgres 16-vectorchord0.3.0
2026-11-03T03:44:52.4300100Z GAP doop ghcr.io/jimmidyson/configmap-reload v0.15.0
2026-11-03T03:44:52.4300469Z GAP doop ghcr.io/onedr0p/exportarr v2.3.0
2026-11-03T03:44:52.4300876Z GAP doop ghcr.io/seriousm4x/upsnap 5
2026-11-03T03:44:52.4301320Z GAP doop ghcr.io/stakater/reloader v1.4.22 newest v1.4.23
2026-11-03T03:44:52.4301730Z GAP doop ghcr.io/tautulli/tautulli v2.18.2
2026-11-03T03:44:52.4302084Z GAP doop gitea.dooplex.hu/admin/felhom-act-runner 0.1.0
2026-11-03T03:44:52.4302449Z GAP doop gitea.dooplex.hu/admin/jarr latest
2026-11-03T03:44:52.4302898Z GAP doop gitea.dooplex.hu/admin/recipe-importer latest
2026-11-03T03:44:52.4303390Z GAP doop gitea.dooplex.hu/admin/revfulop-calendar 1.6.2
2026-11-03T03:44:52.4303749Z GAP doop gitea.dooplex.hu/admin/sparkyfitness-export 0.3.0
2026-11-03T03:44:52.4304148Z GAP doop gitea.dooplex.hu/admin/wan-probe 0.1.0
2026-11-03T03:44:52.4304533Z GAP doop griefed/serverpackcreator 8.1.2
2026-11-03T03:44:52.4304919Z GAP doop gtstef/filebrowser 1.5.8-stable
2026-11-03T03:44:52.4305301Z GAP doop guacamole/guacamole 1.6.0
2026-11-03T03:44:52.4305861Z GAP doop guacamole/guacd 1.6.0
2026-11-03T03:44:52.4306551Z GAP doop index.docker.io/plexinc/pms-docker 1.43.5.11029-6bf8af3f0
2026-11-03T03:44:52.4306960Z GAP doop itzg/mc-backup 2026.10.1 newest 2026.10.3
2026-11-03T03:44:52.4307271Z GAP doop itzg/minecraft-server 2026.10.0-java21 newest 2026.10.1-java17
2026-11-03T03:44:52.4307511Z GAP doop linuxserver/bookstack 26.09.20260929
2026-11-03T03:44:52.4307987Z GAP doop linuxserver/prowlarr version-2.6.5.5623
2026-11-03T03:44:52.4308403Z GAP doop linuxserver/qbittorrent 5.3.0
2026-11-03T03:44:52.4310321Z GAP doop linuxserver/radarr version-6.4.4.10685
2026-11-03T03:44:52.4311184Z GAP doop linuxserver/sonarr version-4.0.20.3014
2026-11-03T03:44:52.4311489Z GAP doop mariadb 11
2026-11-03T03:44:52.4311836Z GAP doop mikefarah/yq 4.54.1
2026-11-03T03:44:52.4312076Z GAP doop minio/minio latest
2026-11-03T03:44:52.4312694Z GAP doop mongodb/mongodb-community-server 8.0.5-ubuntu2204 newest 8.3.13-ubuntu2204
2026-11-03T03:44:52.4312983Z GAP doop msdeluise/plant-it-server 0.10.0
2026-11-03T03:44:52.4313519Z GAP doop mysql 8.4
2026-11-03T03:44:52.4313733Z GAP doop nicolaka/netshoot latest
2026-11-03T03:44:52.4313948Z GAP doop postgis/postgis 16-3.5
2026-11-03T03:44:52.4314211Z GAP doop postgres 15-alpine
2026-11-03T03:44:52.4314575Z GAP doop postgres 16-alpine
2026-11-03T03:44:52.4314795Z GAP doop privatebin/nginx-fpm-alpine 2.0.6 newest 2.1.0
2026-11-03T03:44:52.4315028Z GAP doop prom/alertmanager v0.34.1 newest v0.34.2
2026-11-03T03:44:52.4315317Z GAP doop prom/node-exporter v1.12.1
2026-11-03T03:44:52.4315646Z GAP doop prom/prometheus v3.15.0 newest v3.15.1
2026-11-03T03:44:52.4315897Z GAP doop prometheuscommunity/smartctl-exporter v0.15.0
2026-11-03T03:44:52.4316264Z GAP doop python 3.15-bookworm
2026-11-03T03:44:52.4316489Z GAP doop quay.io/jetstack/version-checker v0.11.0
2026-11-03T03:44:52.4316709Z GAP doop quay.io/prometheus/blackbox-exporter v0.29.1
2026-11-03T03:44:52.4316928Z GAP doop renovate/renovate 44.181.1 newest 44.206.2
2026-11-03T03:44:52.4317180Z GAP doop tailscale/tailscale v1.104.2 newest v1.104.4
2026-11-03T03:44:52.4317426Z GAP app emby/embyserver 4.11.0.4 newest 4.11.0.13
2026-11-03T03:44:52.4317644Z GAP app ghcr.io/immich-app/postgres 16-vectorchord0.4.3-pg
2026-11-03T03:44:52.4317870Z GAP app ghcr.io/karakeep-app/karakeep-chrome 151.0.7922.47-r1
2026-11-03T03:44:52.4318112Z GAP app mariadb 12.3
2026-11-03T03:44:52.4318325Z GAP app mariadb 11.4 newest 11.8
2026-11-03T03:44:52.4318538Z GAP app mariadb 11.8
2026-11-03T03:44:52.4318760Z GAP app mariadb 12.3
2026-11-03T03:44:52.4318971Z GAP app mariadb 11.8
2026-11-03T03:44:52.4319178Z GAP app msdeluise/plant-it 0.10.0
2026-11-03T03:44:52.4319391Z GAP app plexinc/pms-docker 1.43.5.11029-6bf8af3f0
2026-11-03T03:44:52.4319667Z GAP app postgis/postgis 16-3.5-alpine
2026-11-03T03:44:52.4319907Z GAP app postgis/postgis 17-3.5-alpine
2026-11-03T03:44:52.4320128Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4320353Z GAP app postgres 17-alpine
2026-11-03T03:44:52.4320569Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4320780Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4320990Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4321198Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4321406Z GAP app postgres 18-alpine
2026-11-03T03:44:52.4321626Z GAP app postgres 17-alpine
2026-11-03T03:44:52.4321848Z GAP app postgres 16-alpine
2026-11-03T03:44:52.4322061Z GAP app registry.gitlab.com/crafty-controller/crafty-4 4.11.0
2026-11-03T03:44:52.4322293Z FLOATING doop ghcr.io/seanmorley15/adventurelog-backend latest
2026-11-03T03:44:52.4322539Z FLOATING doop ghcr.io/seanmorley15/adventurelog-frontend latest
2026-11-03T03:44:52.4322791Z FLOATING doop nginx 1.31-alpine
2026-11-03T03:44:52.4323001Z FLOATING doop redis 8-alpine
2026-11-03T03:44:52.4323247Z FLOATING doop redis 8.10-alpine
2026-11-03T03:44:52.4323502Z FLOATING app ghcr.io/claperco/claper 2.5
2026-11-03T03:44:52.4323973Z FLOATING app ghcr.io/thomiceli/opengist 1.15
2026-11-03T03:44:52.4324204Z FLOATING app jellyfin/jellyfin 12.4
2026-11-03T03:44:52.4324425Z FLOATING app lscr.io/linuxserver/prowlarr version-2.6.5.5623
2026-11-03T03:44:52.4324649Z FLOATING app lscr.io/linuxserver/sabnzbd version-5.1.3
2026-11-03T03:44:52.4324873Z FLOATING app lscr.io/linuxserver/transmission version-4.1.3-r0
2026-11-03T03:44:52.4325097Z FLOATING app nzbgetcom/nzbget v26.3
2026-11-03T03:44:52.4325326Z FLOATING app redis 7.4-alpine
2026-11-03T03:44:52.4325544Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4325772Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4325980Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4326189Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4326410Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4326625Z FLOATING app redis 7-alpine
2026-11-03T03:44:52.4326869Z FLOATING app wger/server 2.7
2026-11-03T03:44:52.4327096Z SELF box gitea.dooplex.hu/admin/felhom-samba 1.2.0
2026-11-03T03:44:52.4327313Z SELF app gitea.dooplex.hu/admin/recipe-importer v0.9.11
2026-11-03T03:44:52.4327651Z CURRENT doop f0rc3/gokapi v2.2.4
2026-11-03T03:44:52.4328014Z CURRENT doop ghcr.io/seerr-team/seerr v3.5.1
2026-11-03T03:44:52.4328381Z CURRENT doop ghcr.io/thomiceli/opengist 1.15.3
2026-11-03T03:44:52.4328671Z CURRENT doop glanceapp/glance v0.8.7
2026-11-03T03:44:52.4328955Z CURRENT buil golang 1.27.3-trixie
2026-11-03T03:44:52.4329293Z CURRENT buil golang 1.27.3-alpine3.24
2026-11-03T03:44:52.4329704Z CURRENT doop onlyoffice/documentserver 9.4.0
2026-11-03T03:44:52.4330136Z CURRENT buil restic 0.19.1
2026-11-03T03:44:52.4330554Z CURRENT box traefik v3.7.17
2026-11-03T03:44:52.4330963Z CURRENT app actualbudget/actual-server 26.11.0
2026-11-03T03:44:52.4331393Z CURRENT app deluan/navidrome 0.64.2
2026-11-03T03:44:52.4331851Z CURRENT app docmost/docmost 0.97.0
2026-11-03T03:44:52.4332258Z CURRENT app flomp/wanderer-db v0.21.2
2026-11-03T03:44:52.4332691Z CURRENT app flomp/wanderer-web v0.21.2
2026-11-03T03:44:52.4333115Z CURRENT app ghcr.io/advplyr/audiobookshelf 2.37.2
2026-11-03T03:44:52.4333541Z CURRENT app ghcr.io/cmintey/wishlist v0.69.0
2026-11-03T03:44:52.4333983Z CURRENT app ghcr.io/diced/zipline 4.8.2
2026-11-03T03:44:52.4334421Z CURRENT app ghcr.io/gethomepage/homepage v2.7.0
2026-11-03T03:44:52.4334876Z CURRENT app ghcr.io/gramps-project/grampsweb v25.6.0
2026-11-03T03:44:52.4335310Z CURRENT app ghcr.io/grimmory-tools/grimmory v3.5.0
2026-11-03T03:44:52.4335763Z CURRENT app ghcr.io/home-assistant/home-assistant 2026.10.4
2026-11-03T03:44:52.4336230Z CURRENT app ghcr.io/papra-hq/papra 26.7.1-rootless
2026-11-03T03:44:52.4336695Z CURRENT app ghcr.io/seanmorley15/adventurelog-backend v0.13.1
2026-11-03T03:44:52.4337133Z CURRENT app ghcr.io/seanmorley15/adventurelog-frontend v0.13.1
2026-11-03T03:44:52.4337584Z CURRENT app ghcr.io/seerr-team/seerr v3.5.1
2026-11-03T03:44:52.4338077Z CURRENT app ghcr.io/sysadminsmedia/homebox 0.27.1
2026-11-03T03:44:52.4338499Z CURRENT app ghost 6.73.0-alpine
2026-11-03T03:44:52.4338918Z CURRENT app lscr.io/linuxserver/bookstack 26.09.2
2026-11-03T03:44:52.4339387Z CURRENT app lscr.io/linuxserver/grocy 4.7.1
2026-11-03T03:44:52.4339811Z CURRENT app lscr.io/linuxserver/radarr 6.4.4
2026-11-03T03:44:52.4340242Z CURRENT app lscr.io/linuxserver/sonarr 4.0.20
2026-11-03T03:44:52.4340948Z CURRENT app onlyoffice/documentserver 9.4.0
2026-11-03T03:44:52.4341429Z CURRENT app outlinewiki/outline 1.12.0
2026-11-03T03:44:52.4341855Z CURRENT app vaultwarden/server 1.37.5-alpine
2026-11-03T03:44:52.4342302Z CURRENT app vikunja/vikunja 2.7.1
2026-11-03T03:44:52.4342730Z COUNTS ADVISORY=45 BEHIND=14 CURRENT=35 FLOATING=20 GAP=81 SELF=2
2026-11-03T03:44:52.4343172Z FAILED-SOURCES 0
2026-11-03T03:44:52.4343610Z RUNTIME read=9 (235 s) from-cache=176 not-checked=0 stated-unreadable=10 zstd-decoder=zstandard 0.25.0 (pinned wheel, sha256 checked)
2026-11-03T03:44:52.4344113Z TAGS fetched=116 from-cache=2 retried-429=0 retried-timeout=2 (cache /root/.cache/felhom-watch-tags.json)
2026-11-03T03:44:52.4344644Z REQUESTS api.github.com=68 api.osv.dev=1 auth.docker.io=1 blog.cloudflare.com=1 ghcr.io=174 github.com=64 hub.docker.com=203 raw.githubusercontent.com=1 registry-1.docker.io=1
2026-11-03T03:44:52.8773108Z MAIL RESEND-ACCEPTED id=01a19f82-821b-7937-8b20-d8eb97cd797b kind=advisory subject=[Felhom security] cal.com, termix, paperless-ngx, recipes … — 0 new advisories, 63 reminders
2026-11-03T03:44:52.8958850Z STATE written: documentation/security-watch/state.json (335 known advisories)
2026-11-03T03:44:53.0308611Z ::group::Run set -u
2026-11-03T03:44:53.0309403Z set -u
2026-11-03T03:44:53.0309670Z f=documentation/security-watch/state.json
2026-11-03T03:44:53.0309808Z if [ ! -f "$f" ]; then
2026-11-03T03:44:53.0309931Z echo "no memory file was written - nothing to commit"; exit 0
2026-11-03T03:44:53.0310101Z fi
2026-11-03T03:44:53.0310207Z if git ls-files --error-unmatch "$f" >/dev/null 2>&1 && git diff --quiet -- "$f"; then
2026-11-03T03:44:53.0310341Z echo "memory unchanged - nothing to commit"; exit 0
2026-11-03T03:44:53.0310522Z fi
2026-11-03T03:44:53.0310650Z cp "$f" /tmp/state.json
2026-11-03T03:44:53.0310754Z auth=$(python3 -c 'import base64,os;print(base64.b64encode(("x:"+os.environ["PUSH_TOKEN"]).encode()).decode())')
2026-11-03T03:44:53.0310900Z for attempt in 1 2 3; do
2026-11-03T03:44:53.0311046Z git fetch -q --depth 1 origin main && git checkout -q -B main FETCH_HEAD
2026-11-03T03:44:53.0311174Z mkdir -p "$(dirname "$f")" && cp /tmp/state.json "$f"
2026-11-03T03:44:53.0311292Z git add "$f"
2026-11-03T03:44:53.0311469Z git -c user.name="felhom security watch" -c user.email=monitoring@felhom.eu \
2026-11-03T03:44:53.0311631Z commit -q -m "security-watch: memory of $(date -u +%F) (R-1303). Docs only." || { echo "nothing to commit"; exit 0; }
2026-11-03T03:44:53.0311782Z if git -c http.extraHeader="Authorization: Basic $auth" push -q origin HEAD:main; then
2026-11-03T03:44:53.0311984Z echo "memory pushed: $(git rev-parse --short=12 HEAD)"; exit 0
2026-11-03T03:44:53.0312340Z fi
2026-11-03T03:44:53.0312561Z echo "push refused (attempt $attempt) - re-fetching main"
2026-11-03T03:44:53.0312782Z sleep 5
2026-11-03T03:44:53.0312969Z done
2026-11-03T03:44:53.0313152Z echo "MEMORY NOT SAVED after 3 attempts"; exit 1
2026-11-03T03:44:53.0313268Z shell: bash --noprofile --norc -e -o pipefail {0}
2026-11-03T03:44:53.0313406Z env:
2026-11-03T03:44:53.0313969Z PUSH_TOKEN: ***
2026-11-03T03:44:53.0314088Z ::endgroup::
2026-11-03T03:44:54.3755222Z memory pushed: 329d769d89b8
2026-11-03T03:44:54.3765322Z Cleaning up container for job watch
2026-11-03T03:44:54.9457960Z 🏁 Job succeeded