Skip to content

v0.0.6

Choose a tag to compare

View all tags
@bosd bosd released this 21 Oct 23:17
v0.0.6
3509511

A security release: TLS certificate verification no longer trusts the distrusted emSign intermediates.

Security

  • rustls-webpki 0.103.16 (RUSTSEC-2026-0382) and webpki-root-certs 1.0.10 (RUSTSEC-2026-0383). Earlier versions could accept certificate paths through emSign intermediates whose private keys are now public. This affects every forge and index request odx makes over HTTPS. Upgrading is recommended, in particular for the PyPI wheels, which bundle the old versions.

No other changes since 0.0.5.

Built with Rust & AI-accelerated engineering.

Assets 2
Loading