Nzbhydra2 on Info :: LinuxServer.io

nzbhydra2 32-bit ARM Deprecation Notice

Sun, 22 Jan 2023 22:00:00 +0000

Due to the lack of upstream packages for 32-bit ARM preventing improvements to the image, we will be deprecating the 32-bit ARM (armhf) version of our nzbhydra2 image on 2023-03-31.

We will announce the last supported tag for 32-bit ARM at that time.

If you are currently running the nzbhydra2 image on a 32-bit ARM platform we recommend you look at alternative options such as upgrading to a 64-bit OS if your hardware supports it. Please see our blog post regarding our support policy for armhf.

[Resolved] Known Issue: nzbhydra2 Stable v4.3.1-ls52 and later

Thu, 05 May 2022 12:00:00 +0000

Update

We have identified the root cause of the issue and documented the available solutions here: https://docs.linuxserver.io/faq#jammy

Original Post

There is a known compatibility issue with our nzbhydra2 image Stable branch versions v4.3.1-ls52 and later and older versions of the Docker engine on some amd64 platforms. If you experience Java errors on startup in the form of:

ERROR - Unable to determine java version; make sure Java is installed and callable.

Please ensure that your Docker install is updated to at least version 20.10.10. We will update this issue as and when more information is available.

Notification: NZBHydra2 Rebase To Alpine

Tue, 19 Apr 2022 12:00:00 +0000

For operational reasons we will shortly be rebasing our NZBHydra2 container to use our Alpine base image. If you use the image as-is this will not have any direct impact, however, if you make use of any customization scripts which install additional packages these may need to be updated to use the Alpine packages and package manager (apk).

[Resolved] log4j Vulnerability

Mon, 13 Dec 2021 15:00:00 +0000

Update

At this time we have determined that all application/container updates or mitigations that we can reasonably provide have been actioned and as such are marking this issue as resolved.

Original Post

Multiple vulnerabilities (CVE-2021-44228 and CVE-2021-45046) have been discovered in log4j which can lead to denial of service and remote code execution. The following Linuxserver containers have been confirmed not to be affected by CVE-2021-44228 or CVE-2021-45046 due to existing mitigations, upstream patches, or workarounds applied to the container images.

Please note these lists apply to the stated version tags and later only. If you are running older versions of the images they may still be vulnerable.

Fleet - version-2.3.2 and later (Workaround applied + upstream fix)
Airsonic (No log4j-core in use)
HABridge (No log4j-core in use)
Unifi Controller - version-6.5.55 and later (Workaround applied + upstream fix)
Davos version-2.2.2 and later (Upstream fix)
Booksonic Air - version-v2112.2.0 and later (Upstream fix)

The following Linuxserver containers have been confirmed not to be affected by CVE-2021-44228 due to existing mitigations, upstream patches, or workarounds applied to the container images, but may still be vulnerable to CVE-2021-45046.

Unifi Controller - version-6.5.54 and later (Workaround applied + upstream fix)
Booksonic Air - version-v2112.1.0 and later (Upstream fix)
nzbhydra2 - version-v3.18.4 and later (Upstream fix)

The following Linuxserver containers are known to be using a vulnerable version of log4j in their current versions and cannot be mitigated by us. This does not mean they are definitely exploitable, but they may be, especially if exposed to the internet.

Booksonic (Deprecated)

The following Linuxserver containers are unconfirmed as to their vulnerability status, but are Java-based and so may be using log4j in some capacity.

Ubooquity

We will update this post as more information becomes available.

New Container: Nzbhydra2

Thu, 11 Jan 2018 00:00:00 +0000

We have released a new container for Nzbhydra2!

Nzbhydra2 is a meta search application for NZB indexers, the “spiritual successor” to NZBmegasearcH, and an evolution of the original application NZBHydra.

It provides easy access to a number of raw and newznab based indexers. The application NZBHydra 2 is replacing NZBHydra 1 and supports migrating from V1. Be wary that there may be some compatibility issues for those migrating from V1 to V2, so ensure you back up your old configuration before moving over to the new version. NOTE: The last version that supports migration is linuxserver/nzbhydra2:v2.10.2-ls49