Arivu 1.8.2
A security update for complete capture: its runtime now refuses certificates from the compromised eMudhra keys and picks up the latest Node.js security fixes.
Arivu 1.8.2 is out. It finishes the certificate work from Arivu 1.8.1 by bringing the complete-capture runtime up to the same standard as the rest of Arivu.
What’s in it
- Complete capture refuses the compromised eMudhra certificates. In 1.8.1, the connections Arivu makes itself started rejecting certificates from the eight compromised eMudhra keys. The Node.js release used by the complete-capture runtime has now shipped the same protection, along with an updated set of trusted root certificates, and 1.8.2 includes it.
- Node.js security fixes. The same Node.js update fixes several reported security issues in its networking, certificate handling, and compression code.
Before you upgrade
Nothing in your data changes, and nothing looks or works differently. Supported systems are unchanged: Ubuntu 22.04+ and Debian 12+ on AMD64 and ARM64. The installer downloads and verifies the new capture runtime during the upgrade. Keeping your distribution’s ca-certificates package current is still worthwhile.
Follow Self-Hosting Arivu for upgrade steps.