Repository navigation
Security fix
Mitigate the compromised eMudhra intermediate certificate authorities (CVE-2026-111943):
- Build all Linux, macOS, and Windows binaries with Go 1.27.3, which blocks the compromised intermediates during certificate verification.
- Update Docker images’ OS packages and CA certificates to include the eMudhra distrust update (
ca-certificates20261020-r0).
Upgrade bktec to v3.3.1 to receive the mitigation. The deb/rpm packages and Homebrew formula distribute the same patched binaries. Update host operating systems and trust stores separately to protect other software.
This is a security-only patch of v3.3.0; it does not include the v3.4 prerelease features.
Full Changelog: v3.3.0...v3.3.1