What's Changed#
fix(security): stop trusting certificates issued through the compromised eMudhra certificate authorities (CVE-2026-91403), which someone on your Burrow's network could use to pose as RatelKey, a database or any other server it connects to
fix(ratel-node): stop trusting the same certificates, which someone on a node's network could use to read the passwords your Burrow sends a node whose connection is
system(ratel-node 0.5.1)fix(ratel-node): the Linux x86-64 download of ratel-node 0.5.1 starts on Ubuntu 22.04, Debian 12, RHEL, Rocky and Alma Linux 9, and Amazon Linux 2023 (it stopped at once asking for a newer glibc)
fix(ratel-node): let a node finish stopping before its service ends, and count
systemctl stop ratel-nodeas a clean stop, where the service was marked failed (the serviceratel-node-service.shinstalls from a new download of ratel-node 0.5.1)