Skip to content

0.16.1 ‘No Small Wonder’

Choose a tag to compare

View all tags
@partim partim released this 02 Nov 15:28
· 28 commits to main since this release
v0.16.1
e9a419f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security fixes

  • Fixed an issue with nonce re-use in login token which would allow a user to escalate their permissions. This is only an issue when multi-user login is enabled. (#1406)

    This issue has been assigned CVE-2026-109140.

  • Fixed an issue that allowed users to manipulate CAs they are not authorized for via bulk upload. (#1409)

    This issue has been assigned CVE-2026-109141.

  • Fixed a missing validation of the child handle in a local RFC 6492, letting a CA operator act as any child of any CA on the same server exchange. (#1411)

    This issue has been assigned CVE-2026-109142.

  • Updated bundled WebPKI root certificates. (#1414)

Assets 2
Loading