The following security-related issue is resolved in Synergis™ Softwire 12.2.0 (12.2.914) for Genetec Cloudlink™ 110 and 210 appliances.
Highest severity of resolved issues: High
To learn about the different severity levels of security vulnerabilities, see What are security updates?
| Cloudlink model | Issue | CVE ID | Severity | Description |
|---|---|---|---|---|
| All | 5083718 | CVE-2025-68160 CVE-2025-69418 |
High | Updated OpenSSL to 3.5.5. |
| All | 4900320 | CVE-2025-55315 | High | Updated the .NET runtime to 8.0.24. |
| All | 5038232 | Not applicable | High | Updated the base container image to Microsoft’s official ASP.NET Core Runtime image (mcr.microsoft.com/dotnet/aspnet:8.0.24-noble-chiseled), based on Ubuntu 24.04 LTS (Noble Numbat), to incorporate the latest supported security fixes. |
| All | 5054288 | Not applicable | Medium | Implemented a more robust account deletion process for administrators. |
| All | 5038128 | Not applicable | Medium | Removed obsolete backup encryption method used to secure backups. This change affects only backups that are no longer compatible. |
| All | 5031898 | Not applicable | Medium | Removed data from logs to prevent information disclosure. |
| All | 4662636 | Not applicable | Medium | Improved cybersecurity in the Synergis Softwire application on the Genetec Cloudlink appliance by ensuring the uniformization of HTTP security response headers. |