Skip to content

v1.1.2

Choose a tag to compare

View all tags
@peaklabs-dev peaklabs-dev released this 21 Oct 11:17
· 10 commits to main since this release
v1.1.2
434afec
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

  • Update rustls-webpki 0.103.15 → 0.103.16 and webpki-root-certs 1.0.9 → 1.0.10
  • Run apk upgrade in all Docker stages
  • Release 1.1.2

Why?

  • Fix CVE-2026-111943 (RUSTSEC-2026-0382) by updating rustls-webpki to 0.103.16 and webpki-root-certs to 1.0.10, and running apk upgrade in the Docker images. Compromised eMudhra CA keys let an attacker on the network path intercept Sentinel's HTTPS requests and steal its token (CVSS 6.8).
Assets 2
Loading