Overview
Important
This is an optional release for operators running v1.6.3, and a strongly recommended one for operators on v1.6.2 or earlier, because it also contains the eMudhra certificate authority fixes from v1.6.3. It contains no other operator-visible changes.
Other changes
Security
- Includes the eMudhra certificate authority fixes (CVE-2026-111943) first released in v1.6.3: op-dispute-mon is built with Go 1.26.10, whose
crypto/x509rejects the compromised eMudhra intermediates and which carries Go 1.26.9's fixes tocrypto/tls,html/template,net/http,net/textprotoandos; and the image's CA trust store (ca-certificates-bundle20261020-r0) no longer includes the emSign Root CA G3, C1 and C3 roots (#23546, #23566)
Full Changelog: op-dispute-mon/v1.6.3...op-dispute-mon/v1.6.4
🚢 Docker Image: