SIPCAPTURE Homer

v11.0.258 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 1mo Forensics & Incident Response

✓ No known CVEs patched

This release patches 1 known CVE

Topics

analytics callflow capture-agent cdr correlation encapsulation

+14 more

flow hep kamailio monitoring opensips packet-capture packet-sniffer pcap rtc sip statistics troubleshooting voip webrtc

Affected surfaces

deps auth

Summary

AI summary

Fixes a potential database injection vulnerability by addressing unsafe queries.

Type	Severity	Summary	CVE
Feature	Medium	Defaults compaction engine to DuckDB and adds catalog rebuild command. Defaults compaction engine to DuckDB and adds catalog rebuild command. Source: llm_adapter@2026-06-15 Confidence: high	—
Dependency	Low	Bump github.com/apache/thrift dependency from 0.22.0 to 0.23.0 in /src. Bump github.com/apache/thrift dependency from 0.22.0 to 0.23.0 in /src. Source: llm_adapter@2026-06-15 Confidence: high	—
Bugfix	Medium	Fixes potential code scanning alert indicating database query built from user‑controlled sources. Fixes potential code scanning alert indicating database query built from user‑controlled sources. Source: llm_adapter@2026-06-15 Confidence: low	—

Full changelog

chore(deps): bump github.com/apache/thrift from 0.22.0 to 0.23.0 in /src in the go_modules group across 1 directory by @dependabot[bot] in https://github.com/sipcapture/homer/pull/805
Potential fix for code scanning alert no. 40: Database query built from user-controlled sources by @adubovikov in https://github.com/sipcapture/homer/pull/806
fix(compaction): default to duckdb engine + add catalog rebuild command by @adubovikov in https://github.com/sipcapture/homer/pull/808

Full Changelog: https://github.com/sipcapture/homer/compare/11.0.256...11.0.258

Potential fix for code scanning alert no. 40: Database query built from user‑controlled sources (mitigates injection risk)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track SIPCAPTURE Homer

Get notified when new releases ship.

About SIPCAPTURE Homer

Troubleshooting and monitoring VoIP calls.