Nexigon CLI v0.6.1

Security release. All HTTPS connections now use only the operating system's trust store and reject the compromised eMudhra intermediate CA keys.

Back to Nexigon CLI releases

Release Notes

Security release. All HTTPS connections now use only the operating system's trust store and reject the compromised eMudhra intermediate CA keys.

Security

This release responds to the compromise of eight eMudhra intermediate certificate authorities. See the security advisory for details.

In versions up to 0.6.0, repository asset uploads also trusted root certificates compiled into Nexigon CLI, including emSign ECC Root CA - G3, to which the compromised intermediates chain. Nexigon CLI 0.6.1 verifies all HTTPS connections against the operating system’s trust store only. It also rejects certificate chains that contain any of the compromised intermediate keys, regardless of the trust store’s contents.

Upgrading

Upgrade Nexigon CLI on your workstations and CI systems. No configuration changes are required.

Assets