The deaddrop 4.11.1 release

This release aims to fix a bug introduced for fresh installs on 4.11.0.

Bug fixes

  • Since deaddrop 4.11.0, fresh installs would erroneously hardlink (dedup) some of deaddrop’s configuration files. A change to one would show up in the others. Affected files:
    • /opt/sysctl/deaddrop/conf/admin.conf
    • /opt/sysctl/deaddrop/conf/auto.conf
    • /opt/sysctl/deaddrop/conf/global.conf
  • aom has been updated to 3.15.2-1.fc44 to fix CVE-2026-56208.
  • bind has been updated to 9.18.51^git20261003.d0a87358-2.fc44 to fix CVE-2026-10822, CVE-2026-11331, CVE-2026-13321, CVE-2026-19033, CVE-2026-19662, CVE-2026-19666 to CVE-2026-19668, CVE-2026-19941, CVE-2026-75029, CVE-2026-77119, CVE-2026-78301, CVE-2026-80274, CVE-2026-81563, CVE-2026-81736.
  • brotli has been updated to 1.2.1-1.fc44 to fix CVE-2026-111497. Deaddrop does not use brotli anywhere so there is no attack surface in it.
  • ghostscript has been updated to 10.06.0-3.fc44 to fix CVE-2026-39919, CVE-2026-101258, CVE-2026-103226.
  • glib-networking has been updated to 2.80.1-8.fc44 to fix CVE-2026-103963.
  • kernel has been updated to 7.2.15-200.fc44 to fix CVE-2026-99999.
  • libsoup3 has been updated to 3.6.6-11.fc44 to fix CVE-2026-3099, CVE-2026-3632 to CVE-2026-3634, CVE-2026-85197, CVE-2026-85534, CVE-2026-102555 to CVE-2026-102560, CVE-2026-103399.
  • python3.14 has been updated to 3.14.10-1.fc44 to fix CVE-2026-12345.
  • unbound has been updated to 1.26.2-1.fc44 to fix CVE-2026-35501, CVE-2026-50106, CVE-2026-96405, CVE-2026-97206, CVE-2026-109125.
  • util-linux has been updated to 2.41.6-1.fc44 to fix CVE-2026-27456, CVE-2026-76642.

Additional Information

Operating system packages

All system components have been updated to their latest respective version.

Update Instructions

If you have default update configuration, Deaddrop releases will be automatically installed as part of the regular update process. No manual steps are required from administrators or users. The system will apply the update seamlessly in the background, ensuring that the latest fixes are in place without any interruption to normal operations.

Documentation

Further details and configuration guidance are available in the official documentation:

https://sysctl.se/deaddrop/documentation/

SBOM

Each ISO and VHD release has a software bill of materials (SBOM) to make introspection of the release easy to integrate with a number of security tools. Current and historical SBOMs are available for download at the customer portal.

Sysctl web page

https://www.sysctl.se

Sysctl page for Deaddrop releases

https://sysctl.se/deaddrop/releases/

Sysctl documentation for Deaddrop

https://sysctl.se/deaddrop/documentation/

Sysctl customer portal

https://portal.sysctl.se/

Sysctl rss/atom

https://sysctl.se/feed.xml