Issues

• Give phoenix a key-only sshd and a default-deny inbound policy

  labsecurity
  Gerrrt/HomeLab#1496 · Filter by author Gerrrt opened on Nov 14, 2026 · Nothing blocks these

• Put Sliver on ragnarok before the first exercise

  featurelab
  Gerrrt/HomeLab#1481 · Filter by author Gerrrt opened on Nov 12, 2026 · last

• Exercise: constrained delegation (weakness_cd)

  featurelab
  Gerrrt/HomeLab#1480 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Exercise: unconstrained delegation (weakness_ucd)

  featurelab
  Gerrrt/HomeLab#1479 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Exercise: resource-based constrained delegation (weakness_rbcd)

  featurelab
  Gerrrt/HomeLab#1478 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Exercise: DCSync (weakness_dcsync)

  featurelab
  Gerrrt/HomeLab#1477 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Exercise: AS-REP roast (weakness_asreproast)

  featurelab
  Gerrrt/HomeLab#1476 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Exercise: kerberoast (weakness_kerberoast)

  featurelab
  Gerrrt/HomeLab#1475 · Filter by author Gerrrt opened on Nov 12, 2026 · exercises

• Sweep the household wiki against eleven fact groups that changed since 2026-09-01

  wiki
  Gerrrt/HomeLab#1457 · Filter by author Gerrrt opened on Nov 11, 2026

• ADR-0114: deploy MakeMKV on smaug, measure its capabilities, and create the 5800 pass

  media
  Gerrrt/HomeLab#1454 · Filter by author Gerrrt opened on Nov 11, 2026 · Nothing blocks these

• Declare eden and ragnarok in tofu (ADR-0076's scope), and settle how ragnarok's isolation proof survives it

  pipeline
  Gerrrt/HomeLab#1443 · Filter by author Gerrrt opened on Nov 11, 2026 · last
  2

• SOC agents lag the servers: Wazuh agent 4.14.7 vs manager 4.14.10, Velociraptor client 0.77.2 vs server 0.77.3

  soc
  Gerrrt/HomeLab#1439 · Filter by author Gerrrt opened on Nov 11, 2026 · Nothing blocks these

• Retire pyatv_scan_guard when a fixed pyatv reaches Home Assistant (ADR-0113)

  featuresensitive
  Gerrrt/HomeLab#1393 · Filter by author Gerrrt opened on Nov 11, 2026 · Nothing blocks these

• Home Assistant: delete ring_push_guard's firebase_messaging patch once firebase-messaging ships the header fix (ADR-0110)

  featuresensitive
  Gerrrt/HomeLab#1383 · Filter by author Gerrrt opened on Nov 10, 2026 · Nothing blocks these
  1

• Fixable CVEs in postgres (0 critical, 8 high)

  bloodhoundsecuritysensitivewiki
  Gerrrt/HomeLab#1335 · Filter by author github-actions opened on Nov 9, 2026

• Fixable CVEs in debian (0 critical, 4 high)

  observabilitysecurity
  Gerrrt/HomeLab#1334 · Filter by author github-actions opened on Nov 9, 2026

• Fixable CVEs in tsightler/ring-mqtt (8 critical, 124 high)

  securitysensitive
  Gerrrt/HomeLab#1282 · Filter by author github-actions opened on Oct 26, 2026
  2

• Fixable CVEs in glanceapp/glance (0 critical, 11 high)

  securitysensitive
  Gerrrt/HomeLab#1281 · Filter by author github-actions opened on Oct 26, 2026
  1

• Fixable CVEs in eclipse-mosquitto (1 critical, 3 high)

  securitysensitive
  Gerrrt/HomeLab#1279 · Filter by author github-actions opened on Oct 26, 2026
  1

• Home Assistant: delete ring_push_guard once ring_doorbell ships the ding.id fix (ADR-0101)

  featuresensitive
  Gerrrt/HomeLab#1240 · Filter by author Gerrrt opened on Oct 21, 2026 · Nothing blocks these
  2

• Home Assistant: control the HomePods, and the 99→20 rows it needs (ADR-0099)

  featuresensitive
  Gerrrt/HomeLab#1226 · Filter by author Gerrrt opened on Oct 20, 2026 · Nothing blocks these
  1

• Fixable CVEs in grafana/grafana-image-renderer (10 critical, 346 high)

  observabilitysecurity
  Gerrrt/HomeLab#1216 · Filter by author github-actions opened on Oct 19, 2026
  3

• Move the SOC to Wazuh 5.0 once it is stable: it retires filebeat and the cert generator

  blockedfeaturescratchsoc
  Gerrrt/HomeLab#1176 · Filter by author Gerrrt opened on Oct 11, 2026 · last

• Fixable CVEs in specterops/bloodhound (0 critical, 2 high)

  bloodhoundsecurity
  Gerrrt/HomeLab#1126 · Filter by author github-actions opened on Oct 10, 2026
  6

• Fixable CVEs in prom/prometheus (0 critical, 1 high)

  labobservabilitysecurity
  Gerrrt/HomeLab#1125 · Filter by author github-actions opened on Oct 10, 2026
  4