Skip to content

v2.5.4

Latest

Choose a tag to compare

@ericmj ericmj released this 20 Oct 19:37
· 91 commits to main since this release

Security fixes

  • Stop trusting the emSign ECC Root CA - G3, emSign Root CA - C1 and emSign ECC Root CA - C3 root certificates, which Mozilla removed from its root store. The private keys of eight eMudhra intermediate CAs that chain to emSign ECC Root CA - G3 were compromised, so whoever holds them could impersonate the HTTPS servers Hex connects to (eMudhra intermediate CA compromise)