Repository navigation
Portal v0.55.0 — Compromised certificate authorities distrusted
·
49 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
v0.55.0
AndrewDryga
Andrew Dryga
This tag was signed with the committer’s verified signature.
AndrewDryga
Andrew Dryga
1ad6cab
This commit was signed with the committer’s verified signature.
AndrewDryga
Andrew Dryga
A security release. Several eMudhra intermediate certificate authorities were compromised, and every layer that checks certificates now refuses them: the Cloud SQL Auth Proxy that carries the database connection, Terraform, the host operating system, and the CA bundle in the portal image.
Security
- Cloud SQL Auth Proxy 2.26.3 and Terraform 1.17.1 are built with a Go release that no longer trusts the compromised eMudhra intermediates (CVE-2026-111943). The portal image's CA bundle drops the emSign ECC Root CA - G3 and Comodo AAA Services roots.
- OpenSSL 3.0.22-1~deb12u2 in the portal and diagnostics images fixes six issues, including a DTLS flaw and an ECDSA timing leak.
- Portal hosts move to Container-Optimized OS 18867.652.12, with kernel 6.6.159 and 36 fixes since the previous build, among them containerd, glibc, and sudo.
Website
- How it works now leads the top navigation and the mobile menu, and its introduction is shorter.