ZoneMinder
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
A side-by-side editorial comparison of Fluentd and NetBox — release velocity, themes, recent moves, and the top alternatives to consider.
Fluentd 1.20 drops its yajl dependency to keep building on Ruby 4.1
Fluentd shipped 1.20.0 and 1.20.1 on the same day in late October. 1.20.0 replaces yajl with Ruby's built-in JSON, adds opt-in threaded parsing and directory watching to in_tail, a command timeout for in_exec, TCP keepalive for out_forward, a umask option and a cap on evacuated buffer chunks. 1.20.1 removed yajl-ruby from runtime dependencies because it cannot build on Ruby 4.1, so plugins that require it must now declare it themselves. 1.19.4 in September fixed buffer accounting leaks, a path traversal check and syslog limits.
NetBox 4.7's patch run fixes a token leak and a broken restore path.
Four 4.7 patches followed the September 4.7.0 release. 4.7.1 reinstalled hierarchical-path triggers that a pg_dump restore silently dropped, 4.7.2 stopped background bulk requests recording plaintext API tokens in job results, 4.7.3 was a REST and GraphQL performance release, and 4.7.4 adds change-log IDs to webhook payloads, fixes the circuit status GraphQL enum and warns about a thumbnail storage change.
Fluentd shipped 1.20.0 and 1.20.1 on the same day in late October. 1.20.0 replaces yajl with Ruby's built-in JSON, adds opt-in threaded parsing and directory watching to in_tail, a command timeout for in_exec, TCP keepalive for out_forward, a umask option and a cap on evacuated buffer chunks. 1.20.1 removed yajl-ruby from runtime dependencies because it cannot build on Ruby 4.1, so plugins that require it must now declare it themselves. 1.19.4 in September fixed buffer accounting leaks, a path traversal check and syslog limits.
The project is clearing old native dependencies ahead of new Ruby versions while making in_tail cheaper at high file counts. The hardening theme from 1.19.3 and 1.19.4 continues in the buffer and input paths.
Expect 1.20.x patches driven by plugins that break without yajl-ruby, since 1.20.1 pushes that dependency onto plugin authors.
Four 4.7 patches followed the September 4.7.0 release. 4.7.1 reinstalled hierarchical-path triggers that a pg_dump restore silently dropped, 4.7.2 stopped background bulk requests recording plaintext API tokens in job results, 4.7.3 was a REST and GraphQL performance release, and 4.7.4 adds change-log IDs to webhook payloads, fixes the circuit status GraphQL enum and warns about a thumbnail storage change.
The ltree migration in 4.7.0 is still generating follow-up work, and the patch notes are candid about what broke. Performance work on REST serialisation and GraphQL has been steady across the line, and event payloads are getting richer for automation users.
Expect further 4.7.x patches on a two-week rhythm with more API performance fixes; the entries don't show what 4.8 will contain.
Other Infra & APIs products tracked by Sparkpulse, ranked by recent ship velocity. Each card links to a full editorial trajectory and lets you pivot into a head-to-head comparison with either Fluentd or NetBox.
ZoneMinder 1.38.5 fixes 19 vulnerabilities, including authenticated remote code execution
CRI-O ships patch releases across three branches with empty change notes
Certbot keeps tidying correctness bugs around renewals and hooks
Routinator 0.16 will validate ASPA and BGPsec, and run strict, by default
Buildkite drops long-lived GitHub credentials from self-hosted agents
AIReiter adds ByteDance's Seedream 5.0 Flash for fast, low-cost image generation and editing
See all Fluentd alternatives → · See all NetBox alternatives →
Latest ship moves from both products, interleaved chronologically. ⚡ = editorial spark.
They serve adjacent needs but don't currently overlap on shipped themes. Fluentd and NetBox are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). See the at-a-glance table above for a side-by-side breakdown of velocity, recent sparks, and editorial themes.
Sparkpulse doesn't pick a winner — we score release velocity, not feature parity. Fluentd and NetBox are shipping at a similar cadence (velocity 5.0 vs 5.0, both within Sparkpulse's "active" band). For your specific use case, the alternatives sections above list other Infra & APIs products to evaluate alongside.
Top Fluentd alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "Fluentd alternatives" section above for the current picks, or visit /alternatives/fluentd for the full list with editorial commentary on each.
Top NetBox alternatives in Infra & APIs are ranked by recent ship velocity. Browse the "NetBox alternatives" section above for the current picks, or visit /alternatives/netbox for the full list with editorial commentary on each.