This is a security release which removes compromised TLS Certificate Authorities from the trust roots. The private keys for the compromised Certificate Authorities are public and can be used to produce forged TLS certificates.
See https://emudhra.we-have-a-problem.com/, RUSTSEC-2026-0383 and CVE-2026-111943 for more information.
For administrators using our Docker images, all types of TLS connection are impacted and it is strongly recommended to update.
For administrators not using our Docker images, TLS connections to the PostgreSQL database server, if used, are impacted.
Otherwise, check for updates to your operating system trust roots.
Docker image
Regular image:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:02712e68c90f3743fedbd5e3343517481b2b4f246a9fd9e2f050dc2553033847 oci.element.io/matrix-authentication-service@sha256:02712e68c90f3743fedbd5e3343517481b2b4f246a9fd9e2f050dc2553033847 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.27.1 ghcr.io/element-hq/matrix-authentication-service:1.27 ghcr.io/element-hq/matrix-authentication-service:1 ghcr.io/element-hq/matrix-authentication-service:sha-1e367f5 ghcr.io/element-hq/matrix-authentication-service:latest oci.element.io/matrix-authentication-service:1.27.1 oci.element.io/matrix-authentication-service:1.27 oci.element.io/matrix-authentication-service:1 oci.element.io/matrix-authentication-service:sha-1e367f5 oci.element.io/matrix-authentication-service:latest
Debug variant:
- Digest:
ghcr.io/element-hq/matrix-authentication-service@sha256:75f369b206785f1480f4a9f8dd81d7f9f3c6793c40fd184358ecd5d7acae17d4 oci.element.io/matrix-authentication-service@sha256:75f369b206785f1480f4a9f8dd81d7f9f3c6793c40fd184358ecd5d7acae17d4 - Tags:
ghcr.io/element-hq/matrix-authentication-service:1.27.1-debug ghcr.io/element-hq/matrix-authentication-service:1.27-debug ghcr.io/element-hq/matrix-authentication-service:1-debug ghcr.io/element-hq/matrix-authentication-service:sha-1e367f5-debug ghcr.io/element-hq/matrix-authentication-service:latest-debug oci.element.io/matrix-authentication-service:1.27.1-debug oci.element.io/matrix-authentication-service:1.27-debug oci.element.io/matrix-authentication-service:1-debug oci.element.io/matrix-authentication-service:sha-1e367f5-debug oci.element.io/matrix-authentication-service:latest-debug
What's Changed
Other Changes
- [v1.27] Update dependencies to remedy vulnerabilities by @reivilibre in #6066
Full Changelog: v1.27.0...v1.27.1